AMIGOPOD PowerConnect W Clearpass 100 Software Guide de configuration rapide
Cisco WLC Integration
Guide
Revision
Date
Ver 0.93b by jhao
23 Sept 2011
Copyright © 2011 Aruba Networks, Inc.
Aruba Networks HQ
Aruba Networks Headquarters
1344 Crossman Ave
Sunnyvale, CA 94089-1113
United States of America
Web
www.arubanetworks.com
Phone
1-866-WIFI-LAN
CONFIDENTIAL 2
Table of Contents
Introduction................................................................................................................................ 3
Test Environment................................................................................................................... 3
Integration.............................................................................................................................. 5
Cisco WLC Configuration........................................................................................................... 6
Step 1 –Create New VLAN (Optional)................................................................................... 7
Step 2 –Add IP Addressing to VLAN (Optional)..................................................................... 8
Step 3 –Create RADIUS Authentication Server..................................................................... 9
Step 4 –Create RADIUS Accounting Server.........................................................................10
Step 5 –Create PreAuthentication Access Control List (Pre Auth ACL)................................11
Step 6 –Create the new Wireless LAN.................................................................................12
Step 7 –Configure the General WLAN settings ....................................................................13
Step 8 –Configure the Security WLAN settings ....................................................................14
Step 9 –Configure the AAA WLAN settings..........................................................................15
Step 10 –Configure the AAA Override setting ......................................................................16
Amigopod Configuration............................................................................................................17
Step1 –Create RADIUS NAS for Cisco WLC........................................................................18
Step 2 –Restart RADIUS Services .......................................................................................19
Step 3 –Configure Cisco Web Login Page ...........................................................................20
Step 4 –Confirm External Captive Portal URL......................................................................22
Step 5 –Create a test user account......................................................................................23
Testing the Configuration..........................................................................................................25
Step 1 - Connect to the Amigopod wireless network .............................................................25
Step 2 –Confirm DHCP IP Address received........................................................................26
Step 3 –Launch Web Browser and login ..............................................................................26
Step 4 –Confirm RADIUS debug messages on Amigopod...................................................28
CONFIDENTIAL 3
Introduction
This document outlines the configuration process on both the Cisco Wireless LAN Controller
(WLC) and the Amigopod appliance to create a fully integrated Visitor Management solution.
The solution leverages the captive portal functionality built into the Cisco WLC software image.
The captive portal functionality allows a wireless client to authenticate using a web-based portal.
Captive portals are typically used in public access wireless hotspots or for hotel in-room Internet
access. After a client associates to the wireless network, their device is assigned an IP address.
The client must start a web browser and pass an authentication check before access to the
network is granted.
Captive portal authentication is the simplest form of authentication to use and requires no
software installation or configuration on the client. The username/password exchange is
encrypted using standard SSL encryption.
However, portal authentication does not provide any form of encryption beyond the
authentication process; to ensure privacy of client data, some form of link-layer encryption (such
as WEP or WPA-PSK) should be used when sensitive data will be sent over the wireless
network.
Amigopod extends the standard Cisco WLC captive portal functionality by providing many
advanced features such as a fully branded user interface, SMS integration for delivery of
receipts, bulk upload of visitors for conference management, self provisioning of users for public
space environments to name a few.
Test Environment
The test environment referenced throughout this integration guide is based on an Cisco WLC
4402 controller. Although this low end hardware platform has been used, the testing and
therefore this procedure is valid for all hardware variants from Cisco in its WLC range including
the WiSM blade that installs as a module in the Catalyst 6500 switching platform.
The WLC range in based on the Cisco acquisition of Airespace and therefore this integration
guide is valid for any solution based on the Airespace technology. Other Cisco wireless
reference designs such as Autonomous IOS Access Points and the preceding WLSM
architecture do not natively support the required Captive Portal functionality and therefore are
not covered in this Integration Guide.
CONFIDENTIAL 4
The following table shows the software versions used during the integration testing. This
document will be updated in the future if changes in either Amigopod or Cisco subsequent
releases affect the stability of this integration. It is advised that the customer always check for
the latest integration guide available from either Amigopod or Cisco.
Dated Tested:
September 2011
Amigopod Version:
Kernel3.3.5, Radius Services3.3.1
Plugins Required:
Standard build
Cisco WLC Version:
4.2.209.0
Integration:
HTTP Captive Portal
An Amigopod VM Server was deployed in its own VLAN/subnet with layer 3 access to the LAN
interface of the Cisco WLC controller. DHCP was provided on the Wireless Guest Network and
routing was enabled between subnets
Cisco WLC IP Address
10.51.1.234
Internet Gateway Address
10.51.0.1
Amigopod IP Address
10.162.111.13
Amigopod RADIUS port
DHCP Server
Client DHCP Range
Auth 1812 Acc 1813 (default settings)
10.51.0.10
10.51.1.1-128
The following diagram provides a high level overview of the test lab topology:
CONFIDENTIAL 5
Integration
Although the Cisco WLC supports both internal and external Captive portal functionality, this
integration guide will focus on the latter as the internal Captive portal dictates the use of the
internal login page native to the controller. This login page is very basic and doesn’t allow for the
significant customization possible with the Amigopod Web Logins feature.
Note: Cisco now allows for fully customized captive portal pages to be uploaded to the
controller and managed via templates on the Cisco WCS management platform but this process
requires a significant amount of web design experience to produce a professional result. One of
Amigopod’s strongest features is the Skin Plugin technology where the presentation of the User
Interface is separated from the mechanics of the underlying application. This allows Amigopod
to supply end users with a ready branded Skin for all Amigopod interaction including both Visitor
and Operator pages.
This integration guide will also leverage the Cisco WLC’s ability to define and reference external
RADIUS servers for the authentication and accounting of visitor accounts. In the standalone
Cisco WLC Guest provisioning solution the local database in each controller is used to store
user credentials, limiting the scalability of the solution to resources of the local deployment. With
the introduction of Amigopod, all visitor accounts are created, authenticated and accounted for
on the Amigopod internal RADIUS Server.
CONFIDENTIAL 6
Cisco WLC Configuration
The following configuration procedure assumes that the Cisco WLC has been powered up and a
basic IP configuration has been applied through the CLI to allow the Administrator to access the
Web User Interface. The following table reviews the IP Addressing used in the example
environment. This should be replaced with the site specific configuration information of each
customer deployment:
Cisco WLC Address
10.51.1.234
Internet Gateway Address
10.51.0.1
Amigopod IP Address
10.162.110.13
Amigopod RADIUS port
DHCP Server
Client DHCP Range
Auth 1812 Acc 1813 (default settings)
10.51.0.10
10.51.1.1-128
Note: In this particular guide, we use the management interface as our WLAN interface. In an
actual deployment, oftentimes you’ll find a specific interface/VLAN created and designated for
use with the Guest WLAN. These will be deployment specific details and the WLC configuration
will need to be adjusted to accommodate the desired deployment configuration.
CONFIDENTIAL 7
Step 1 –Create New VLAN (Optional)
A new vlan can to be created to bind to the new Wireless LAN that will be used for the Visitor
users. From the Controller
Interfaces screen, click on the Add button and enter the new VLAN
ID and name you wish to use and then click the Apply button.
This step is considered optional as depending on the complexity of the site deployment, the
administrator may simply decide associated the new Wireless LAN with the default
Management interface and all wireless traffic will be forwarded onto this LAN. The network
design of each site will dictate whether a new VLAN is required for separation of traffic.
The configuration example used has taken this more simplistic approach of associated the new
Wireless LAN with the default Management interface.
IMPORTANT: Click the Apply button to save the changes.
CONFIDENTIAL 8
Step 2 –Add IP Addressing to VLAN (Optional)
Now the VLAN has been created, an IP address needs to be assigned to the VLAN interface on
the controller. This IP Address will not act as the default gateway for all wireless traffic on the
Visitor SSID –this will be provided by an upstream router terminating the VLAN defined in the
previous step. From the Controller
Interfaces screen, select the Edit button for the newly
created VLAN (VLAN 111 in this optional example). Enter the designated IP Address details for
the Wireless Visitor network. Make sure to enter the appropriate DHCP server details for the
interface so the controller knows where to forward any wireless DHCP requests. Also define
which of the front panel interfaces will be connected to this defined VLAN. These front panel
interfaces are configured with dot1q trunking enabled by default.
IMPORTANT: Click the Apply button to save the changes.
CONFIDENTIAL 9
Step 3 –Create RADIUS Authentication Server
In order for the Cisco WLC to successfully authenticate the guest users that will be provisioned
on the Amigopod system, a RADIUS Authentication Server needs to be defined on the
controller. From the Security
AAA
RADIUS menu option, select Authentication and then click
the New button in the top corner.
Enter the IP Address of your Amigopod deployment in the Server IP Address field. This can be
found on the console of the Amigopod server. There is no need to change the default RADIUS
Port Number as this is the default port used by Amigopod.
IMPORTANT: Enter and REMEMBER the Shared Secret used for authenticating the controller
to the Amigopod RADIUS server as this MUST MATCH the configured Shared Secret that will
be input during the configuration of the Amigopod software.
IMPORTANT: Please ensure that the Network User check box is selected so that this RADIUS
server can be used to authenticate Clients connecting to the WLC.
IMPORTANT: Click the Apply button to save the changes.
CONFIDENTIAL 10
Step 4 –Create RADIUS Accounting Server
In order for the Cisco WLC to successfully send accounting data associated with traffic being
generated by the guest users, a RADIUS Accounting Server needs to be defined on the
controller. From the Security
AAA
RADIUS menu option, select Accounting and then click the
New button in the top corner.
Enter the IP Address of your Amigopod deployment in the Server Address field. This can be
found on the console of the Amigopod server. There is no need to change the default RADIUS
Port Number as this is the default port used by Amigopod.
IMPORTANT: Enter and REMEMBER the Shared Secret used for authenticating the controller
to the Amigopod RADIUS server as this MUST MATCH the configured Shared Secret that will
be input during the configuration of the Amigopod software.
IMPORTANT: Please ensure that the Network User check box is selected so that this RADIUS
server can be used to perform accounting for Clients connecting to the WLC
IMPORTANT: Click the Apply button to save the changes.
Autres manuels pour PowerConnect W Clearpass 100 Software
21
Ce manuel convient aux modèles suivants
1
Table des matières
Autres manuels AMIGOPOD Logiciel
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Manuel utilisateur
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Guide de configuration rapide
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Mode d’emploi
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Guide de configuration rapide
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Guide de configuration rapide
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Manuel utilisateur
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Manuel utilisateur
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Guide de configuration rapide
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Manuel utilisateur
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Manuel utilisateur
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Manuel utilisateur
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Manuel utilisateur
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Guide de configuration rapide
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Manuel utilisateur
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Guide de configuration rapide
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Manuel utilisateur
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Guide de configuration rapide
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Guide de configuration rapide
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Guide d'installation
AMIGOPOD
AMIGOPOD PowerConnect W Clearpass 100 Software Manuel utilisateur
Manuels Logiciel populaires d'autres marques
PS Audio
PS Audio PowerPlay Manuel du propriétaire
Brady
Brady LOCKOUT PRO 3.0 Manuel de service
Avaya
Avaya Interaction Center Manuel utilisateur
Texas Instruments
Texas Instruments TI-83 Plus Silver Edition Manuel
Novell
Novell GROUPWISE 8 - INTERNET AGENT Manuel utilisateur
Oracle
Oracle Application 9i Manuel utilisateur
Acer
Acer RDM Manuel utilisateur
Canon
Canon Vixia HF21 Manuel utilisateur
Canon
Canon ZR950 Manuel utilisateur
Samsung
Samsung Auto Backup Manuel utilisateur
Polycom
Polycom Vortex EF2201 Instructions d'installation et d'utilisation
Brocade Communications Systems
Brocade Communications Systems Brocade 8/12c Manuel utilisateur