Wireless Network

📡 Creation of a Secure Wireless Network for Administration 🔐

1️⃣ Objective 🎯

The objective is to deploy a WiFi network exclusively for the administration team, allowing connection only from laptops of authorized members. This will be done via MAC address filtering, so that only devices with specified MAC addresses can connect.

This network will have exclusive access to the administration segment (LAN-ADMIN) and will be protected with WPA2-Enterprise for enhanced security.

2️⃣ WiFi Network Configuration 🔧

📍 Network name (SSID): ADMIN_OFFTUBE
📍 Security type: WPA2-Enterprise
📍 Encryption: AES
📍 MAC address filtering: Enabled (only authorized devices)
📍 Assigned IP range: 192.168.3.100 - 192.168.3.200

3️⃣ Authorized MAC Addresses 🖥️

Only devices with the following MAC addresses may connect:

✅ Team laptops
14:75:5b:a3:7f:0a
14:75:5b:xx:xx:xx (other administration laptops)

✅ Additional authorized devices

• Network administration devices (e.g., a monitoring tablet)

• Configuration machines (if wireless access to specific devices is needed)

⛔ Unauthorized devices will be blocked by MAC filtering

4️⃣ How to Configure the Network 🛠️

🔹 Basic configuration of the WiFi access point

1. Access the router or WiFi access point

   • Through a browser (192.168.3.1) with admin credentials.

2. Create a new SSID

   • Name: ADMIN_OFFTUBE

   • Encryption: WPA2-Enterprise

   • RADIUS server: Optional for user authentication.

3. Static or DHCP IP assignment

   • Set a dedicated IP range for this network (192.168.3.100 - 192.168.3.200)

4. Enable MAC address filtering

   • Manually add authorized MAC addresses.

   • Block unknown devices by default.

5. Connection tests

   • Connect an authorized laptop and verify access to LAN-ADMIN.

   • Try to connect an unauthorized device to confirm it is blocked.

5️⃣ Benefits of this Setup 🔥

✅ Enhanced Security 🔒

• Only admins can access the network.

• WPA2-Enterprise + MAC filtering provide strong protection.

✅ Full control over connected devices 🎛️

• Only devices with approved MAC addresses may connect.

• Optionally integrates with a RADIUS server for user authentication.

✅ Traffic separation 🚀

• Does not interfere with client or server networks.

• Provides access only to the LAN-ADMIN segment.

✅ Efficient monitoring and management 📊

• Activity logging and detection of unauthorized access attempts possible.

6️⃣ Conclusion 📌

This WiFi network allows administrators to securely and restrictively access Offtube systems. The use of MAC filtering and WPA2-Enterprise protects against unauthorized access, ensuring that only the admin team can access critical resources.