Wireless Operations · Lab WLN-07
You are the on-call network tech for Marsh & Co. Outfitters, a 40-person retailer. Their new Beacon WX-3 wireless controller shipped with factory defaults. Lock it down before the store reopens.
The controller still uses the published default login. Replace it with a unique admin account.
Create a Layer 2 allow list named StoreRoster. Only these company devices may associate. Add all four MAC addresses from the asset sheet.
Asset sheet — register scanners & back-office laptops: 3A:7F:91:0C:42:18 · 3A:7F:91:0C:42:6B · 5E:11:A4:77:30:02 · 5E:11:A4:77:30:5D
Bring up the staff SSID on the strongest encryption available, then add an isolated guest SSID so customer traffic can't reach store systems.
Define a device-access policy named RetailOnly that denies a device category which has no business on a store network. Name the policy, choose the action, and pick the category to block.