Технические ссылки для Cisco Cisco 4404 Wireless LAN Controller
10
Deployment Guide for Cisco Guest Access Using the Cisco Wireless LAN Controller, Release 4.1
OL-13691-01
Creating Guest Access Accounts
Note
If you select WPA2 from the Layer 2 Security drop-down menu, you must check the check boxes
of both of the WPA Encryption options (AES and TKIP) for the feature to work.
of both of the WPA Encryption options (AES and TKIP) for the feature to work.
Note
If using a RADIUS server to authenticate, select the appropriate IP address from the
Authentication Server drop-down menu found under the Radius Servers section. For this
example, we need to define this value given our Layer 2 security selection in Step 10.
Authentication Server drop-down menu found under the Radius Servers section. For this
example, we need to define this value given our Layer 2 security selection in Step 10.
Step 11
Click Apply to save edits for the interface on the running configuration of the WLAN switch.
Creating Guest Access Accounts
The Local Network User option allows you to directly add users to the local database of the controller.
The local user database is limited to a maximum of 2048 entries and is set to a default value of 512
entries at the Security > General page. This database is shared by local management users (including
lobby ambassadors), net users (including guest users), MAC filter entries, and disabled clients. Together,
all of these types of users cannot exceed the configured database size.
The local user database is limited to a maximum of 2048 entries and is set to a default value of 512
entries at the Security > General page. This database is shared by local management users (including
lobby ambassadors), net users (including guest users), MAC filter entries, and disabled clients. Together,
all of these types of users cannot exceed the configured database size.
The Lobby Ambassador option is a two-step process. The first step is to create a lobby administrator
account, also known as a lobby ambassador account. The second step is to create guest user accounts
after logging into the controller using the lobby ambassador account. The lobby ambassador has limited
configuration privileges and only has access to the web pages used to manage the guest accounts. The
lobby ambassador can specify the amount of time that the guest user accounts remain active. After the
specified time elapses, the guest user accounts expire automatically.
account, also known as a lobby ambassador account. The second step is to create guest user accounts
after logging into the controller using the lobby ambassador account. The lobby ambassador has limited
configuration privileges and only has access to the web pages used to manage the guest accounts. The
lobby ambassador can specify the amount of time that the guest user accounts remain active. After the
specified time elapses, the guest user accounts expire automatically.
Creating a Guest Access Account Using the Lobby Ambassador Option
A lobby ambassador account is used to assign guest access accounts. You can create a lobby ambassador
account on the controller through either its GUI or the CLI.
account on the controller through either its GUI or the CLI.
Examples for the CLI and GUI are provided in this section.
Creating a Lobby Ambassador Account Using the Controller GUI
To create a lobby ambassador account on the controller using the controller GUI, follow these steps:
Step 1
Click Management > Local Management Users. The window seen in
displays.