Group controls
Per-group controls in EasyPSK via RADIUS: cap the number of devices, bound a group in time, put it on a recurring schedule, and block individual devices.
Every group in an EasyPSK via RADIUS Context carries a set of controls on top of its security flavour. You configure them per group, from the group’s settings, and they decide when and for which devices the group’s key actually admits a device. A device that presents the correct key but falls outside these controls is rejected: that is configured behavior, not a fault.
Device cap
Section titled “Device cap”Each group holds up to 30 devices. Within that ceiling you can set a lower maximum for the group: once the cap is reached, further device registrations are rejected until you raise the cap or remove devices from the group. Useful when access is allocated per device count: a trade-fair booth that includes exactly five devices, a co-working desk with two, a dorm room with a fair-use ceiling.
Time-bound groups
Section titled “Time-bound groups”Give a group a validity window: a start and an end. Outside the window, devices are not admitted, even with the correct key. The group and its devices stay intact, so a group can be prepared ahead of an event and expire cleanly after it. Typical shapes: a semester, a conference, a short-stay rental booking.
Group schedule
Section titled “Group schedule”Put a group on a recurring schedule for when it is active, for example office hours or venue opening hours. Outside the schedule the group behaves as inactive and devices are not admitted. Combine with a validity window when a group should both recur and eventually end.
Device block list
Section titled “Device block list”Block a specific device from a group. A blocked device is rejected even when it presents the correct key, without disturbing the rest of the group. This is the precise tool when one device must go: revoking a user, retiring a lost phone, or honoring a landlord’s request, all without rotating the group’s key for everyone else.
Related controls
Section titled “Related controls”- Four-eyes device approval lives with the Approved flavour: each device registration must be acknowledged by a second administrator before the device is admitted. See Groups and security flavours.
- Kiosk self-enrollment (Online kiosk) creates a group automatically at a resident’s or guest’s first Self-Service login. See the Self-Service portal.
Troubleshooting with controls in mind
Section titled “Troubleshooting with controls in mind”When a device with a correct key is refused, check the group’s controls before anything else: is the device cap reached, is the group outside its validity window or schedule, is the device on the block list, or (on Approved groups with four-eyes approval) is the registration still waiting for its second acknowledgement?