Cisco Cisco NAC Appliance 4.1.0
Cisco NAC Appliance - Clean Access Manager Installation and Administration Guide
OL-12214-01
Chapter 5 Configuring User Login Page and Guest Access
Guest User Access
3.
Choose the guest role you created from the Role dropdown list.
4.
Click Save User.
Configure Traffic Policies for Guest Role
1.
Go to User Management > User Roles > List of Roles and click the Policies button for the Guest
role (the Traffic Control page for the role appears).
role (the Traffic Control page for the role appears).
2.
Click the Host sublink tab. The Host policies page for the role appears.
3.
For Trusted DNS Server, click the Add button to add a trusted DNS server to the role.
4.
Add a policy for the redirection URL you configured for the user role, by typing an Allowed Host,
(e.g.
(e.g.
www.cisco.com
), selecting a Match option(e.g.
contains
) and clicking Add.
5.
Configure any other traffic policies needed for the role in the IP or Host configuration pages.
6.
Set a session timeout for the role if desired under User Management > User Roles > Schedule >
Session Timer > Edit [user role].
Session Timer > Edit [user role].
See
Enable Guest Access Button on Login Page
1.
Go to Administration > User Pages > Login Page > List and click the Edit button next to the login
page on which you want to provide guest access.
page on which you want to provide guest access.
2.
Click the Content sublink to edit the page (Click the checkbox for Guest Label. Modify, if desired,
the label that appears on the guest access button.
the label that appears on the guest access button.
3.
Optionally, disable other user-input login fields, and type relevant instructions to the guest user in
the Instructions text field. To configure a left-pane login screen, set the page to be Frame-based
under the General sublink. See
the Instructions text field. To configure a left-pane login screen, set the page to be Frame-based
under the General sublink. See
for details.
4.
Click Update.
Enable Guest Users with Any Credential
With this method, guest users do not use the Guest Access button to login but can enter any identifier as
a login credential. This method allows guest users to submit their email addresses. The identifier the user
submits in the login page (e.g. email address) will appear as the User Name in the Online Users page
while the user is logged in.
a login credential. This method allows guest users to submit their email addresses. The identifier the user
submits in the login page (e.g. email address) will appear as the User Name in the Online Users page
while the user is logged in.
General Steps
1.
2.
3.
4.
5.
Map Allow All Auth Provider to Guest Role
1.
Go to User Management > Auth Servers > New and choose Allow All from the Authentication
Type dropdown menu.
Type dropdown menu.
2.
For the Default Role, choose the “Guest” user role you already created for the guest user.
3.
for further details).