How to hide a SSID Broadcast

[dudarra]

hi guys, stupid question, can i hide a single ssid? thanks in advance raffau

[emnoc]

Yes but it' s not a good security practice. Anybody with a wifi scanner like kismet will find it, & as soon as a client associates. if you think hidden a SSID for security practices, then you should rethink this and deploy common bcp for wifi protections. Hidding a SSID is not one of them in my book. [:' (]

[DirtyBlueshirt]

I don' t think it' s wise to simply dismiss a hidden SSID as a security practice. As with any security practice, it' s best as a layer of security. " Defense in Depth" , as it were. Corporations often use hidden SSIDs for their corporate networks, and then control access via Passwords, MAC filtering, or client certificates. The hidden SSID won' t stop anyone with a WiFi scanner, but it will stop the casual user from trying (and failing) to connect and tying up help desk resources with " why can' t I connect my iPod to xxxNet WiFi?" questions.

[dudarra]

thanks guys, it is only temporary! because we want to test some an features in 802.1x nac. i did some research, but still can' t find it... raffau

[neonbit]

Hi Raffau, You can stop a single SSID from broadcasting via the CLI with the following commands: config wireless-controller vap edit <ssid name> set broadcast-ssid disable end

[dudarra]

thanks! works! cheers raffau