Aruba IAP-103, Руководство пользователя

Страница: 133 / 437

In the CLI
To configure security settings for guest users of the WLAN SSID profile:
(Instant AP)(config)# wlan ssid-profile <name>
(Instant AP)(SSID Profile <name>)# essid <ESSID-name>
(Instant AP)(SSID Profile <name>)# type <Guest>
(Instant AP)(SSID Profile <name>)# captive-portal{<type>[exclude-uplink <types>]|external
[exclude-uplink <types>| profile <name>[exclude-uplink <types>]]}
(Instant AP)(SSID Profile <name>)# captive-portal-proxy-server <IP> <port>
(Instant AP)(SSID Profile <name>)# blacklist
(Instant AP)(SSID Profile <name>)# mac-authentication
(Instant AP)(SSID Profile <name>)# max-authentication-failures <number>
(Instant AP)(SSID Profile <name>)# auth-server <server-name>
(Instant Access Point (SSID Profile <name>)# radius-accounting
(Instant Access Point (SSID Profile <name>)# radius-interim-accounting-interval
(Instant Access Point (SSID Profile <name>)# radius-accounting-mode {user-association|user-
authentication}
(Instant AP)(SSID Profile <name>)# wpa-passphrase <WPA_key>
(Instant AP)(SSID Profile <name>)# wep-key <WEP-key> <WEP-index>
(Instant AP)(SSID Profile <name>)# end
(Instant AP)# commit apply
To configure security settings for guest users of the wired profile:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# type <Guest>
(Instant AP)(wired ap profile <name>)# captive-portal{<type>[exclude-uplink <types>]|external
[exclude-uplink <types>| profile <name>[exclude-uplink <types>]]}
(Instant AP)(wired ap profile <name>)# mac-authentication
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
External Captive Portal Redirect Parameters
If the external captive portal redirection is enabled on a network profile, IAP sends an HTTP response with the
redirect URL to display the splash page and enforce captive portal authentication by clients. The HTTP
response from the IAP includes the following parameters:
Parameter Example Value Description
cmd login Type of operation
mac 34:02:86:c6:d2:3e Client MAC address
essid guest-ecp-109 ESSID
ip 192.0.2.0 Client IP address
apname 9c:1c:12:cb:a2:90 IAP host name
apmac 9c:1c:12:cb:a2:90 IAP MAC address
vcname instant-C8:1D:DA" VC name
switchip securelogin.arubanetworks.com Captive portal domain used for
external captive portal
authentication
url http://www.google.com/ original URL
Table 29:
External Captive Portal Redirect Parameters
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide Captive Portal for Guest Access | 133