Технические ссылки для Cisco Cisco 4404 Wireless LAN Controller

Скачать
Страница из 54
15
Deployment Guide for Cisco Guest Access Using the Cisco Wireless LAN Controller, Release 4.1
OL-13691-01
  Web Authentication Process
Figure 14
Local Net Users Page
From the Local Net Users page, the system administrator can see all of the local net user accounts 
(including guest user accounts) and can edit or remove them as desired. When you remove a guest user 
account, all of the clients that are using that guest WLAN and are logged in using that account’s 
username are deleted.
You can edit or remove accounts by clicking the blue arrow drop-down menu and selecting the 
appropriate option.
Using the CLI to View Guest Accounts
To view all of the local net user accounts (including guest user accounts) using the controller CLI, enter 
this command: show netuser summary
Web Authentication Process
Web authentication is a Layer 3 security feature that enables the controller to block IP traffic (except 
DHCP-related packets) until the client has correctly supplied a valid username and password. When you 
use web authentication to authenticate clients, you must define a username and password for each client. 
Then when the clients attempt to join the wireless LAN, their users must enter the username and 
password when prompted by a login window.
Using the Web Authentication feature on a Cisco wireless LAN controller, we can authenticate a guest 
user on the wireless LAN controller, on an external web server or on an external database on a RADIUS 
server.
These four methods are described in the following sections: