Instruction/ maintenance manual of the product OL-15986-01 Cisco Systems
Go to page of 134
Americas Hea dquarters Cisc o Syst ems , Inc . 170 West Ta sman Driv e San Jos e, CA 95 134-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553- NETS (638 7) Fax: 408 527-0883 Cisco NA C Guest S er v er Installation and Configuration Guide R ele ase 1 .
THE SPECIFICATIONS AND INFORMATION REG ARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOU T NOTICE. ALL STATEMENT S, INFORMATI ON, AND RE COMMENDATIONS IN T HIS MANUAL ARE BELI EVED TO BE A CCURATE BUT ARE P RESENTED WI THO UT WARRANTY OF ANY KIND, EXPRE SS OR IMPLIED.
iii Cisco NAC Guest Server I nstallat ion and Configur ation Gui d e OL-15986-01 CONTENTS About Th is Gui de ix CHAPTER 1 Welcome to Cisco NAC Guest Serve r 1-1 Intro ducti on 1-1 Guest Acce ss Conc e.
Cont ents iv Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Edit Exi stin g Admi n Acc oun t 3-11 Delete Existin g Admin Accoun t 3-13 CHAPTER 4 Configur ing S ponsor Authenti.
Content s v Cisco NAC Guest Server I nstallat ion and Configur ation Gui d e OL-15986-01 CHAPTER 7 Integra ting with Cis co NAC Appliance 7-1 Adding Cl ean Acc ess Manager En tri es 7-1 Editi ng Clean.
Cont ents vi Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 CHAPTER 12 Replicat ion and Hig h Availa bil ity 12-1 Setti ng up rep licati on 12-1 Config uring Provisi onin g 12.
Content s vii Cisco NAC Guest Server I nstallat ion and Configur ation Gui d e OL-15986-01 Printi ng/E mail/ SMS Multip le Ac coun ts 15-9 Viewin g Mu ltiple Account Groups 15-10 Viewin g Mu ltiple Account Groups 15-10 Findin g Mu ltiple Acco unt Group s by use rname 15-11 Findin g Mult iple Acc ount G roups on the Act ive Acc ounts Repo rt.
Cont ents viii Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01.
ix Cisco NAC Guest Server I nstallat ion and Configur ation Gui d e OL-15986-01 About This Guide March 5, 2008, OL-15986-01 This pre face inc ludes the follo wing s ections: • Audien ce • Purpose .
x Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 About Thi s Guide Product Docume ntation Ta b l e 1 lists docume nts are a vaila ble for C isco N A C Guest Serv er on Cisco. com at the fo llo wing URL: http://www .cisco.com/en/US/products/ps61 28/tsd_ pro ducts_sup port_series _home .
CH A P T E R 1-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 1 Welcome to Cisco NAC Guest Server Introduction The Cisco N A C Guest Server is a compl ete provisionin g and reporting system that pro vides temporary network acce ss for guests, visit ors, co ntracto rs, consulta nts or cust omers.
1-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 1 Welcome t o Cisco NAC Guest Ser ver Before You Start Sponsor The Sponsor i s the person w ho cre ate s th e guest u ser ac co unt. Th is pe r son is oft en a n em ployee o f the organization t hat provides the net work access.
1-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 W el com e to Cisco NA C Guest Serv er Befor e Yo u Star t Figur e 1 -1 Shipping Bo x Contents Note Be cause pro.
1-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 1 Welcome t o Cisco NAC Guest Ser ver Before You Start Additional Information For late-breaking or additional deta ils for this release, refer to the Release Note s for Cisco NA C Guest Server , Rele ase 1.
CH A P T E R 2-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 2 Installing Cisco NAC Guest Se rver This chap ter cont ains the follow ing sections: • Connec ting the C i.
2-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 2 Installing Cisco NAC Guest Server Connecti ng t he Cisco NA C Gues t Server Figur e 2-1 Cisco NA C Guest Serv er F.
2-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 2 Insta lling Cisco NAC Gue st Server Command Line Configuration Note The three LAN ports each ha ve their o wn LED indicator s for acti v ity/link status and netw ork speed.
2-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 2 Installing Cisco NAC Guest Server Command Line Configura tion Figur e 2-4 Choose eth0 Int e rface Step 3 Select th e eth0 interf ace fr om the list using the up a nd do wn arro w ke ys and press <Enter> .
2-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 2 Insta lling Cisco NAC Gue st Server Command Line Configuration Figur e 2-6 Quit the Utility Step 6 At the comman.
2-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 2 Installing Cisco NAC Guest Server Re-Ima gin g the Ap pl iance Re-Imagi ng the Ap pliance When th e Cis co N A C Gue st Se rver is sh ipped, the system image already prelo aded on the unit, so imaging is u nnecessa ry .
2-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 2 Insta lling Cisco NAC Gue st Server Re- I magi ng t he A p plia nce Note If you pre ss <Enter> b y mistak e on a se rial conn ection, the imaging process will still ru n, b ut there is no display until the appliance reboots at th e end of the process.
2-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 2 Installing Cisco NAC Guest Server Re-Ima gin g the Ap pl iance Step 9 The applian ce boots and run s the f inal setup of the ima ge automati cally . T he imaging process is co mplete when the logi n screen displa ys ( Figure 2- 10 ).
CH A P T E R 3-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 3 System Setup The s ystem c an be configured through the web in terface t o provide the n etworking configur ation for th e appli ance and othe r syst em se tting s th at are i mport ant such as time and S SL cer tificate.
3-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Access ing the A dministr ation Int erf ace Obtain and Insta ll Cisco NAC Guest Serve r License Use the follo wing step s to obtain and instal l your Fle xLM pr oduct lice nse fi les for Cisco N AC G uest Server .
3-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup Accessing the Administration Interface Figur e 3-1 Guest Serv er License F orm (exampl e) Step 7 Click Submit to install the lice nse.
3-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Con fi gur ing Ne t wor k Se tt ing s Step 10 After the license is installe d, the administrator in.
3-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup Date an d Time Setti ngs Figur e 3-4 Netw o r k Sett ings Y o u can ch ange the fol lowing Network Settin gs: • Domain Name—E nter th e domain name for your organization (e.
3-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Date and Time Settings Figur e 3-5 D at e/Time Set tings Step 2 Select th e cor rect Date and Tim e for the location of the Guest Ser ver . Step 3 Click the Set System Date and T ime button to appl y the time and date.
3-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup SSL Certificate SSL Certificate Both spons ors and administ rators can access t he Cisco NA C Guest Server usi ng either HTTP or HTTPS. For more sec ure access Cisco reco mmends using HTTPS acc ess.
3-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup SSL Certificate Note Th e Main SSL Se ttings pa ge also provides the R est art W eb S erver button. Y ou ne ed to re start the W eb Serv er comp onent of th e applian ce when ne w certif icates ar e genera ted or upl oaded to the applianc e.
3-9 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup SSL Certificate Step 4 T o use the ne w temporary certif icate you must restart the web server proc ess. Click the Main tab from the top of the scre en, then click the Restart W eb Server butto n ( Figure 3- 6 ).
3-10 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Conf igurin g Admi nistrat or A uth enti cat ion Upload Certificate Files The Cisco N AC Guest Ser ver provides a meth od of importing/uploa ding certif icate f iles to the appliance.
3-11 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup Confi guring Administr ator Auth enticat ion Figur e 3- 1 0 Adm in Acc oun ts Step 2 In the Adm in A cc ounts page ( Figure 3-10 ), click the Add User button.
3-12 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Conf igurin g Admi nistrat or A uth enti cat ion Step 1 From the a dministration interf ace select A u thenti cation > Adm inistr ators from the le ft hand me nu.
3-13 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup Confi guring Administr ator Auth enticat ion • If succ essful ly ch an ged, a succ ess me ssage d isplay s a t th e top o f th e pa ge a nd yo u c an m a ke additi onal cha nge s to the sam e admi n acc oun t.
3-14 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Conf igurin g Admi nistrat or A uth enti cat ion.
CH A P T E R 4-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 4 Configuring Sponsor Authentication Sponsor s are the pe ople who use Cisco N A C Guest Server to create gues t accoun ts. Spon sor authenti cation is the method used to authentic ate spon sor users on the Guest Serv er .
4-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Loc al Spons or Aut henticat ion Figur e 4- 1 Local Users Step 2 Click the Add User butt on to bring u p the local sponso r configurat ion page ( Figure 4-2 ).
4-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Config uring Lo cal Sponso r Authenticat ion • If successfu lly ad ded, a su cces s messag e display s at the top of t he page and you c an ad d additi ona l user accoun ts.
4-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Loc al Spons or Aut henticat ion Note Leaving the Password and Repe at Password fields empt y keeps the existing passwo rd.
4-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Configuring Active Directory (AD) Authenticat ion Configuring Active Dir.
4-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Ac ti ve Directory (AD) Aut henticat ion Add Active Directory Domain Controller Step 1 From the admin istration inter face se lect A uthentica tion > Sponsors > A ctiv e Directo ry Serv ers from the menu.
4-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Configuring Active Directory (AD) Authenticat ion • Base DN—T ype the Base Distinguished Name (DN ) of the domain controller .
4-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Ac ti ve Directory (AD) Aut henticat ion Figur e 4- 9 Edi t DC Se ttings Step 4 Modify sett ings as ne eded : • User Ac count Suffix—Edit the User Accoun t Suff ix and incl ude the leading @, for example: @cca.
4-9 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Confi guring L D AP Authent ication Delete Existing Domain Controller Entry Step 1 From the administrat ion interf ace, selec t A uthenti catio n > Sponsor > Acti ve Dir ectory Serv ers from the menu.
4-10 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing LDAP Authe ntica ti on • Base DN —This is the Dis tinguis hed Name of the cont aine r object wher e an LD AP search to f ind the user begins, su ch as O U=E ngin eerin g,O =Cisc o.
4-11 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Confi guring L D AP Authent ication Add an LDAP Server Step 1 From the a dministration interf ace select Authentica tion > Spo nsor s > LDAP Servers from t he m enu ( Figure 4-11 ).
4-12 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing LDAP Authe ntica ti on • LD AP Server Name— T yp e a text descri ption of the LD A P Server Name . For example: Cisco LDAP - ldap .
4-13 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Confi guring L D AP Authent ication Figur e 4- 13 Sel ect L DAP Server to Ed it Step 3 In the L D AP Server pa ge ( Figure 4-14 ), edit the details f or authen ticating agains t this LD AP serv er .
4-14 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing LDAP Authe ntica ti on • User Searc h Filter— The User Search Filter de f ines ho w user entrie s are named in the LD AP serve r .
4-15 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Configuring RADIUS Authentication Figur e 4-15 Delet e LD AP Serv er entr ies Step 3 Click the Delete L D AP bu t t o n . Step 4 Confirm dele tion of the L D AP Ser ver at the p rompt .
4-16 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing RADIUS A ut henticat io n Add a RADIUS Server Step 1 From the administrat ion interf ace sel ect A uthentica tion > Sponsors > RADIUS Servers from the menu ( Figure 4-16 ).
4-17 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Configuring RADIUS Authentication Edit an Exis ting RADIUS Serv er Step 1 From the a dministration interf ace select Aut hentication > Sponsor > Radius Servers from the men u.
4-18 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Spon sor Authe nticati on Set tings Step 5 Click the Save S e t t i n g s button.
4-19 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Confi guring Sponsor Auth enticat ion Settings Figur e 4-21 A uthentication Order . The f irst serv er to be authentic ated ag ainst is at the to p of t he list an d the la st at the bottom.
4-20 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Spon sor Authe nticati on Set tings.
CH A P T E R 5-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 5 Configuring User Group Permissions User g rou ps are the met hod by whi ch to a ssign pe rmis sions to the s pons ors.
5-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 5 Configuring User Gr oup Perm issions Adding User Groups Figur e 5-1 User Gr oups Step 2 Click the Add Group but ton to add a ne w user gr oup. Step 3 From the Add a Ne w User Gr oup page ( Figure 5-2 ), ente r the name for a new user group.
5-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 5 Conf igu ri ng User Gro up Permiss ion s Adding User Gro ups • Allo w Login—Select Ye s to allo w sponsors in th is group to access the Cisco N AC G u est Serv er .
5-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 5 Configuring User Gr oup Perm issions Editin g Us er Gro ups – T emplate Options—Y ou can specify a list of preset durations that the sponsor ca n use when creati ng acc ount s, such as 1 h our, 1 day , or 3 da ys.
5-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 5 Conf igu ri ng User Gro up Permiss ion s Editi ng User Gro ups Figur e 5-5 Edit User Gr oup Step 4 Edit Perm issions fo r the User Gro up as follo ws: • Allo w Login—Select Ye s to allo w sponsors in th is group to access the Cisco N AC G u est Serv er .
5-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 5 Configuring User Gr oup Perm issions Deleting User Grou ps • Active Accounts—Cho ose o ne of the foll owing pe.
5-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 5 Conf igu ri ng User Gro up Permiss ion s Speci fying the Or der of User Groups Figur e 5-6 List Gr oups to Dele te Step 2 Select the group you wish to delete and clic k the Delete Gr oup but t o n ( Figure 5-6 ).
5-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 5 Configuring User Gr oup Perm issions Mapping to Active D ire ctory Gro ups Mapping to Active Directo ry Groups If .
5-9 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 5 Conf igu ri ng User Gro up Permiss ion s Mapping to LDAP Gro ups 1. Storing the group membership in an attri bute of the user objec t. W ith this meth o d the u ser object has one or more attrib ute s that list the grou ps that the user is a member of.
5-10 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 5 Configuring User Gr oup Perm issions Mapp ing to RADIUS Gr oups Mapping to RADIUS Groups If a sponso r authenti c.
CH A P T E R 6-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 6 Configuring Guest Policies Org anizations co mmonly ha ve poli cies in pla ce for creatin g accou nts for the ir intern al users and systems, su ch a s the forma t or l engt h of the u ser name a nd/ or compl exity o f pa ssword.
6-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 6 Co nfig urin g Gue st Po lic ies Settin g th e Pas swo r d Pol ic y Step 2 Choose one of three opt ions for cr eatin g the user na me for the guest acc ount. • Userna me Po licy 1 (email) Use the gue st’ s email ad dress as the userna me.
6-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 6 Conf igu ri ng G uest Policie s Setting the Guest Details Policy Figur e 6-2 P asswor d P olicy Step 2 In the Alphabetic Characters sec tion, e nter the ch aracter s to us e in the password a nd the a mount to includ e.
6-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 6 Co nfig urin g Gue st Po lic ies Settin g th e Gues t Det a ils Poli c y Figur e 6-3 Guest Deta ils P olicy Step .
CH A P T E R 7-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 7 Integrating with Cisco NAC Appliance This chapte r describes the follo wing: • Adding Cle an A cce ss Man.
7-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 7 Integrating with Cisco NAC Appliance Adding Clean Acces s Mana ger E ntries Step 1 From the Gue st Serv er administ ration int erfac e, sele ct De v ices > NA C Applia nce from the left ha nd menu ( Fig ure 7- 1 ).
7-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 7 Integr ating with Cis co NA C Applia nce Editing Clean Access Manag er Entri es Step 6 In the Clean A c cess Ma .
7-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 7 Integrating with Cisco NAC Appliance Deleting Clea n Acces s M anager E ntrie s • Hostname of Address—T ype the DNS name or IP addre ss for the CAM. • Admin Username— Enter an admin userna me which has API permi ssion to the CAM .
7-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 7 Integr ating with Cis co NA C Applia nce Config uring t he CAM for Repo rting Note For detailed instruct ions on.
7-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 7 Integrating with Cisco NAC Appliance Con fi gur ing the C AM fo r Rep o r ti n g Configure the CAM to Form at RADI.
7-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 7 Integr ating with Cis co NA C Applia nce Config uring t he CAM for Repo rting Figur e 7 -8 Edit User Name At tr ibute Step 3 In the Edit User_ Name attrib ute page ( Figure 7-8 ), click the Reset Element bu tton to remo ve the exist ing sa mple da ta f orm at .
7-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 7 Integrating with Cisco NAC Appliance Con fi gur ing the C AM fo r Rep o r ti n g Figur e 7 -1 0 A dd Calling Stati.
CH A P T E R 8-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 8 Configuring RADIUS Clients This chapte r describes the follo wing • Ove rvie w • Adding RA DIU S Client.
8-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 8 Configuring RADIUS Clients Addin g RADI US Cl ie nt s Note Any time you make a change to a RADIUS component on th e Cisco N A C Guest Server , you will need to Restar t the RADIUS ser vice for the ch anges to be come acti ve.
8-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 8 Conf igu ring RADIU S Clients Editing RADIUS Clients Step 5 T ype a shared Secr et for the R ADIUS c lient. This must match t h e shared secret specif ied in t he configurati on of t he RA DIU S c lient .
8-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 8 Configuring RADIUS Clients Delet in g RADI US Client s Figur e 8-4 Edit RADIUS Client Step 3 In the Edit Radius Client page ( Figure 8-4 ), edit the IP Address of th e RADIUS client.
8-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 8 Conf igu ring RADIU S Clients Deleting RADIUS Clients Figur e 8-5 List RADIUS Cl ients Step 2 In th e Radi us Cli ents page ( Figure 8-5 ) , select the RADIUS client from the list.
8-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 8 Configuring RADIUS Clients Delet in g RADI US Client s.
CH A P T E R 9-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 9 Guest Account Notification When a guest accoun t is created, the detai ls of the ac count need to be passed fr om the sponso r to the guest.
9-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 9 Guest Account Notification Configur ing Email Notifi ca tion Configuring Email Notification The follo wing steps describe ho w to conf igure email setti ngs for the Cisco N A C Guest Server to correctl y deliv er guest account details via email.
9-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 9 Gue st Accou nt Notif ica tion Configuring SMS Notification Configuring SMS Notification Short Messa ge Service (SMS) is delivered through a n SMS gateway service that s upports SMT P (Simple Mail Transport Protoc ol) delivery .
9-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 9 Guest Account Notification Con fi gur in g SMS Noti ficat ion.
CH A P T E R 10-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 10 Customizing the Application This chapte r describes the follo wing • User Interf ace T emplates • Add.
10-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 10 Customizing the Application Adding a Us er Inte rface T emplat e Adding a User Interfac e Template When you add a ne w template, it is automatically based on the default temp late to facilit ate editing.
10-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 0 Customizi ng the App li cat io n Editing a U ser In terfac e Templ ate Step 1 From the a dministration interf ace select U ser I nterf ace > T e mpla tes from the l eft hand menu .
10-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 10 Customizing the Application Editing a U ser Interf ace Templat e Editing the Print Template The Prin t T emplate.
10-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 0 Customizi ng the App li cat io n Editing a U ser In terfac e Templ ate Step 6 Click the Save T em p l a t e button t o save your c hang es.
10-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 10 Customizing the Application Editing a U ser Interf ace Templat e Step 7 Click the Save T em p l a t e button t o save your c hang es.
10-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 0 Customizi ng the App li cat io n Editing a U ser In terfac e Templ ate Step 5 The SMS Bod y contains be the SMS text to be sent to the guest.
10-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 10 Customizing the Application Deleting a Template Figur e 1 0-9 Add A ccount Duratio n Step 4 Enter a d escrip tion that yo u want to appear in the sponsor in terfa ce, such as “1 Hour .
10-9 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 0 Customizi ng the App li cat io n Setting User Default Redirection Figur e 1 0-1 0 Def ault User Int erf ace Mapp ing Step 2 Select th e T emplat e from the dropdo wn list.
10-10 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 10 Customizing the Application Setting User D efault Red ire ct ion.
CH A P T E R 11-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 11 Backup and Re store Y o u should bac kup the C isco NA C G uest Server on a regu lar basi s so that in the event of a har dware failure you do not loose c ritical data.
11-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 11 Backup a nd Restore Configur ing Backu p Settings Configuring Backup Settings Step 1 From th e ad minist rat ion hom e pa ge se le ct Serv er > Ba ckup from the l eft hand menu ( Figure 11-1 ).
11-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 1 Back up an d Restore Restor ing Back ups Schedulin g a Back up Y o u can s chedu le back ups to occur every day , week, o r month at 1:00 AM .
11-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 11 Backup a nd Restore Restoring B ackups Note Y ou ca n on ly rest ore a b acku p t o the sa me versio n of Cisc o N A C Guest Se rver software with w hi ch the backup was taken.
CH A P T E R 12-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 12 Replication and High Availab ility T o provi de high a vailability , the Cisco N A C Guest Serve r solution c an be con figured so that a pair of units synchr onize th eir databa ses betw een one an other .
12-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 12 Replication and High Availability Sett ing up repl icati on Step 1 Create a ba ckup of the Cisco NA C Guest Server befor e start ing by following the T a king a snapsh ot instructions in Configuring Backup Se ttings, pa ge 11-2 .
12-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 2 Replicat ion and Hi gh Availab ility Configuring Provisioning Configuring Provisi oning When th e Ci sco N A .
12-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 12 Replication and High Availability Repl icati on St atus Replication Stat us At an y moment in t ime yo u can check the replic ation status of the C isco N A C Guest Ser ver s.
12-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 2 Replicat ion and Hi gh Availab ility Deploym ent Consi derati ons Device Failure If one of the C isco N A C G.
12-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 12 Replication and High Availability Deploym en t Consider ations Dependi ng on the amo unt of activity that your C.
12-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 2 Replicat ion and Hi gh Availab ility Deploym ent Consi derati ons.
12-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 12 Replication and High Availability Deploym en t Consider ations.
CH A P T E R 13-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 13 Logging and Troubleshooting This chapte r describes the follo wing: • System Logging • Log Files System Logging All ac tions within the C isco NA C Guest Server a re logg ed int o the data base.
13-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapte r 13 Logging a nd Troubl eshoot ing Log Files Log Files The system r ecords inf ormation in dif ferent log f iles de.
13-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 3 Logg ing and Troub le shoot ing Log Files CAM Upda te L ogg ing The ac c oun ts on th e C is co NA C Appl ia nce Cl ean Acc ess M ana ge r ar e cr eat ed by a p roce ss th at runs e v ery minute on the Cis co NA C Gue st Server .
13-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapte r 13 Logging a nd Troubl eshoot ing Log Files.
CH A P T E R 14-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 14 Licensing The Cisco N A C Guest is licensed via a f ile associated with the MA C address of the applia nce. The f ile can be obtai ned from cisco.c om and inst ructions a re include d in the lice nsing pac k.
14-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 14 Licensing Licensin g.
CH A P T E R 15-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 15 Sponsor Documentation This cha pter provides exam ple user doc ument ation for spon sor users w ho creat e guest acc ounts.
15-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Connecti ng t o the Gu es t Server Figur e 15-1 A uthentication Screen Step 2 In the Cisco Gue st Server login page , enter you r Usern ame a nd Password and click the Login button ( Figure 15 -1 ).
15-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Connecting t o the Guest Server Step 4 In the defa ult settings you can customize th.
15-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Creating Guest Us er A ccoun ts Creating Guest User Acc ounts If you are assi gne d the appro pria te perm issions, you can cr eate tem porar y guest user accou nts.
15-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Creating Guest User Accounts Figur e 15-5 Guest Use r Cr eated Step 12 Dep ending on.
15-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Creating Guest Us er A ccoun ts Print Account Details Step 1 Click the Print Account b utton. Figur e 15-6 Pr int Ac count Details A new Printer wi ndow opens a nd you c an p rint o ut th e gue st u ser det ails.
15-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Multiple Guest Accounts Multiple Guest Accou nts The Cisco N AC Gue st Serve r allo ws you to create multip le accounts at the same time.
15-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Mult iple G uest Ac cou nts Step 3 Enter th e detail s in the te xt field as requ ested with a comma se parating th e v alues. Step 4 Select th e Acc ount Sta rt t ime, Account End time, and T imezone for the accoun t.
15-9 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Multiple Guest Accounts Figur e 15-1 0 Cr eat e Ran dom A ccounts Step 3 Enter the amo unt of ac coun t s tha t yo u want to g en erat e.
15-10 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Mult iple G uest Ac cou nts Figur e 15-12 Pr int for random a c count cr eation Wh.
15-11 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Multiple Guest Accounts Figur e 15-13 Multiple A ccount Gr oups Step 3 Click the Edi t butto n to edi t the b ulk a ccounts.
15-12 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Editin g Gu est Acco unts Editing Guest Accounts If yo u cr ea te an ac co unt f or a gu es t an d you ne e d to exten d t hei r acc oun t a cce ss, you can c hange the expiry date an d time of the ac count.
15-13 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Viewing Active Accounts and Resending Details Figur e 15-17 Suspend A ccounts Step 2 In the Su s p en d User Acc ounts page ( Figure 15-17 ), yo u can view a list of the ac coun ts that you are abl e to suspend.
15-14 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Reportin g on G uest Users Figur e 15-19 Full Repor ting Step 2 The Ci sco NA C Guest Ser ver Repo rt ing page ( Figure 15-19 ) initially display s the co mplete r eport for your use r per mission s.
A- 1 Cisco NAC Guest Server I nstallati on and Configur ation Gui d e OL-15986-01 APPENDIX A Open Source License Acknowledgements Notices The fol lo wing notices p ertain to this soft ware l icense. OpenSSL/Op en SSL Proje ct This pr odu ct in clu des soft ware developed by the Op enSSL Proj ect for u se in t he Op en SSL T oolkit ( http://www .
A- 2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Appendix A Open Sou rce License Acknowledg ements Notice s 5. Product s deriv ed from thi s software may no t be called “O penSSL” nor may “OpenSSL ” appear in their n ames with out prior wr itte n per mission of the Op en SSL Proj ec t.
A-3 Cisco NAC Guest Server I nstallat ion and Configur ation Gui d e OL-15986-01 Append ix A Open Source License A cknow l edge men ts Notices THIS SOFT W ARE IS PR O VIDED BY ERIC YO UNG “ AS IS”.
A- 4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Appendix A Open Sou rce License Acknowledg ements Notice s.
An important point after buying a device Cisco Systems OL-15986-01 (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Cisco Systems OL-15986-01 yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Cisco Systems OL-15986-01 - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Cisco Systems OL-15986-01 you will learn all the available features of the product, as well as information on its operation. The information that you get Cisco Systems OL-15986-01 will certainly help you make a decision on the purchase.
If you already are a holder of Cisco Systems OL-15986-01, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Cisco Systems OL-15986-01.
However, one of the most important roles played by the user manual is to help in solving problems with Cisco Systems OL-15986-01. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Cisco Systems OL-15986-01 along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center