Access to Wi-Fi networks via two-step and two-party control
Systems and methods include, responsive to a Wi-Fi client device providing a password for a zone of a Wi-Fi network, determining a status of the Wi-Fi client device; when the status is unknown, placing the client device in a holding area associated with the zone, wherein the client device is connected to the Wi-Fi network while in the holding area and has restricted access that is less than full access to the zone in an allowed zone; responsive to placing the client device in the holding area, causing a notification to an administrator that the client device is in the holding area; and with the client device in the holding area, one of moving the Wi-Fi client device to the allowed area, moving the client device to a rejected area for the zone, and leaving the client device in the holding zone, based on any input or lack thereof.
1. A method comprising:
responsive to a Wi-Fi client device providing a password for a zone of a Wi-Fi network, determining a status of the Wi-Fi client device;
when the status of the Wi-Fi client device is unknown, placing the Wi-Fi client device in a holding area associated with the zone, wherein the Wi-Fi client device is connected to the Wi-Fi network while in the holding area and has restricted access that is less than full access to the zone in an allowed zone;
responsive to placing the Wi-Fi client device in the holding area, causing a notification to an administrator that the Wi-Fi client device is in the holding area; and
with the Wi-Fi client device in the holding area, one of moving the Wi-Fi client device to the allowed area, moving the Wi-Fi client device to a rejected area for the zone, and leaving the Wi-Fi client device in the holding zone, based on any input or lack thereof from the administrator.
2. The method of claim 1 , further comprising
when the status is previously allowed, placing the Wi-Fi client device in the allowed zone directly.
3. The method of claim 1 , further comprising
when the status is previously rejected, placing the Wi-Fi client device in the rejected zone directly and providing a notification to the administrator.
4. The method of claim 1 , wherein the notification includes any of a push notification, an email, an in application notification, an update in a dashboard, and an update in a User Interface, and wherein the notification includes device information and device history.
5. The method of claim 1 , further comprising
tracking the input or lack thereof for the Wi-Fi client device for future connections and uniquely identifying the Wi-Fi client device by any of a Media Access Control (MAC) address and a host identifier.
6. The method of claim 1 , wherein the zone is one of a plurality of zones including at least an employee zone and a guest zone, and each zone includes a different Service Set Identifier (SSID).
7. The method of claim 1 , wherein the restricted access includes Internet access only.
8. The method of claim 7 , wherein the restricted access further includes any of bandwidth limitation, content filtering, and site restrictions.
9. The method of claim 1 , further comprising
providing a User Interface (UI) to the administrator via any of a Web page, a dashboard, and a mobile application, wherein the UI includes a listing of Wi-Fi client devices in the holding area for the zone.
10. The method of claim 9 , further comprising
subsequent to the one of moving the Wi-Fi client device to the allowed area and moving the Wi-Fi client device to the rejected area for the zone, receiving an updated selection from the administrator via the UI.
11. The method of claim 1 , further comprising
providing Software Defined Networking (SDN) rules to one or more access points associated with the Wi-Fi network for implementing the zones and associated access restrictions.
12. The method of claim 1 , wherein the zone is a first zone, and further comprising
receiving a configuration allowing the Wi-Fi client device to access one or more devices in a second zone separate from the first zone.
13. A non-transitory computer-readable storage medium having computer readable code stored thereon for programming a device to perform steps of:
responsive to a Wi-Fi client device providing a password for a zone of a Wi-Fi network, determining a status of the Wi-Fi client device;
when the status of the Wi-Fi client device is unknown, placing the Wi-Fi client device in a holding area associated with the zone, wherein the Wi-Fi client device is connected to the Wi-Fi network while in the holding area and has restricted access that is less than full access to the zone in an allowed zone;
responsive to placing the Wi-Fi client device in the holding area, causing a notification to an administrator that the Wi-Fi client device is in the holding area; and
with the Wi-Fi client device in the holding area, one of moving the Wi-Fi client device to the allowed area, moving the Wi-Fi client device to a rejected area for the zone, and leaving the Wi-Fi client device in the holding zone, based on any input or lack thereof from the administrator.
14. The non-transitory computer-readable storage medium of claim 13 , wherein the steps further include
when the status is previously allowed, placing the Wi-Fi client device in the allowed zone directly.
15. The non-transitory computer-readable storage medium of claim 13 , wherein the steps further include
when the status is previously rejected, placing the Wi-Fi client device in the rejected zone directly and providing a notification to the administrator.
16. The non-transitory computer-readable storage medium of claim 13 , wherein the steps further include
providing a User Interface (UI) to the administrator via any of a Web page, a dashboard, and a mobile application, wherein the UI includes a listing of Wi-Fi client devices in the holding area for the zone.
17. A controller comprising:
a processor; and
memory communicatively coupled to the processor and storing instructions that, when executed, cause the processor to
responsive to a Wi-Fi client device providing a password for a zone of a Wi-Fi network, determine a status of the Wi-Fi client device;
when the status of the Wi-Fi client device is unknown, cause placement of the Wi-Fi client device in a holding area associated with the zone, wherein the Wi-Fi client device is connected to the Wi-Fi network while in the holding area and has restricted access that is less than full access to the zone in an allowed zone;
responsive to placing the Wi-Fi client device in the holding area, cause a notification to an administrator that the Wi-Fi client device is in the holding area; and
with the Wi-Fi client device in the holding area, one of move the Wi-Fi client device to the allowed area, move the Wi-Fi client device to a rejected area for the zone, and leave the Wi-Fi client device in the holding zone, based on any input or lack thereof from the administrator.
18. The controller of claim 17 , wherein the instructions, when executed, further cause the processor to
when the status is previously allowed, cause placement of the Wi-Fi client device in the allowed zone directly.
19. The controller of claim 17 , wherein the instructions, when executed, further cause the processor to
when the status is previously rejected, cause placement of the Wi-Fi client device in the rejected zone directly and providing a notification to the administrator.
20. The controller of claim 17 , wherein the instructions, when executed, further cause the processor to
present a User Interface (UI) to the administrator via any of a Web page, a dashboard, and a mobile application, wherein the UI includes a listing of Wi-Fi client devices in the holding area for the zone.