Network wifi Management

[omokunmi2017]

Please, I'm very new to the field of networking but I need help. How can you manage your wifi network. By allowing a certain set of people to have access and blocked the rest. Even if they all have access to the WiFi password?. I really do need help on it. 

We're all on the same network but needs to block some set of people and let some set of people have access to it but mind you they'll have have access to the WiFi password?. How can I go about it please.

[BPry]

@omokunmi2017,

The proper solution here really would not be doing this through your firewall. You would typically handle this on the wireless side of things and not authenticate off of a PSK, instead relying on something like certificate authentication or authenticate the user themselves to determine if you're granting access to the network or not. What you have available to you really depends on the wireless equipment.

While you can force this solely through the firewall and keep the wireless network as a PSK, you are adding friction there that doesn't need to exist. If the user shouldn't be connecting to that wireless network, you should deal with that on the connection side of things instead of allowing them to associate and then blocking access to resources after the fact. 

Without knowing what the rest of the environment looks like, whether these wireless users are isolated off into their own subnet or zone, it's hard to provide any meaningful guidance that doesn't run the risk of impacting the rest of your network. There's absolutely ways that you can do this solely through your firewall via something like an authentication policy and enforcing only known-users access to resources, but without knowing how things are setup you run the risk of it impacting more than just the wireless network. 

I'll also caution that you may be looking at the problem wrong. You don't really provide any rationale for why only some of your users should be able to connect, while others can't, or if this is meant for personal devices or devices under your control. Providing the full context of the request and detailing what you actually need can help someone provide you a better solution with a better user experience.