Hello,
I'm looking at building a wifi hotspot and was wondering what implications the following security setup would pose:
Wireless access unit configured with AP isolation but no encryption.
Redirect all traffic to a web page so that access to the web, or anything else would require a valid username and password.
If I have AP isolation, and user authentication, do I really need wifi encryption? What security risk would there be? Does AP isolation protect against valid authenticated users setting up an ARP spoof and packet sniffer? It would be nice so that users wouldn't have to first join the wifi network with a network key, and then have to authenticate on the web page. Unless of course, there was some way to encrypt the wifi data without bothering the user for a network password. Is there such to way to configure something like that?
Basically, I'm looking for users to join the network, type their username and password and be off. I don't want them to have enter a network key first, and then type their username and password to be off and surfing.
How are most hotel and internet cafe hotspots configured?
Thanks!
hotspot security? AP isolation 
Linear Mode
