security best practice for access points static IP or dhcp IP?
-
I would say it should be set with a static IP
-
So when it comes to logical management, being able to set your own ip on access points makes it more certain that I know the IP addresses of the Access Points that I manage. In that sense it may make it easier to secure.
Using DHCP, is easier in the scale of the management, for example if I have 100 - 1000 APs. I can't imagine statically setting the IP address on 15 better yet 100 or 1000 APs myself...but I'm lazy in that sense.
I'm not sure if either static or dhcp would be better security best practice. Can you tell me your reason for static has being your choice? Love it read it.
-
I believe there is not more than 5 AP's in this case. Its always been best practice to setup static IP's for any core network device such as routers, switches, firewalls and servers to name a few. I understand that you can use different methods of managing AP's in huge amounts, For example a wireless controller to manage all your AP's and portioning off a range of IP's to use for an AP DHCP scope...
-
-
@Ramon-Ranhell said in security best practice for access points static IP or dhcp IP?:
I believe there is not more than 5 AP's in this case. Its always been best practice to setup static IP's for any core network device such as routers, switches, firewalls and servers to name a few. I understand that you can use different methods of managing AP's in huge amounts, For example a wireless controller to manage all your AP's and portioning off a range of IP's to use for an AP DHCP scope...
Ok, so context matters. As I stated above, I see the idea of static IP as best for management of the device. I'm not sure if static IP is a
security best practice
which is what your post was originally. So you were not meaning thatsecurity best practice
is different from standardbest practices.
-
I personally like to use DHCP scope on a specific "management" vlan and then after the AP boots and I identify it, I can just create a reservation in DHCP. DHCP also allows you to apply option codes if needed, such as CAPWAP server.