Dell Powerconnect W-ClearPass Hardware Appliances Guía de usuario

Dell Networking W-ClearPass Guest 6.0Deployment Guide

10 | Dell Networking W-ClearPass Guest 6.0 | Deployment GuideComments 264Variable Assignment 264Conditional Text Blocks 264Script Blocks 265Repeated T

100 | Working with Certificate Signing Requests Dell Networking W-ClearPass Guest 6.0 | Deployment GuideClearPass Policy Manager as the server certifi

Mark the Reject this request check box to confirm that the certificate signing request should be rejected, andthen click the Reject Request button.l D

102 | Importing a Code-Signing CertificateDell Networking W-ClearPass Guest 6.0 | Deployment GuideAn operator’s profile must include the Import Code-S

3. Complete the rest of the form with your information. Mark the Issue this certificate immediately check box,then click Create Certificate Request.Th

104 | Requesting a CertificateDell Networking W-ClearPass Guest 6.0 | Deployment Guide3. You can use the following additional options in the upper-rig

Paste the text into the Certificate Signing Request text field. Be sure to include the complete block of text,including the beginning and ending lines

106 | Specifying Certificate Properties Dell Networking W-ClearPass Guest 6.0 | Deployment GuideNOTE: The file should be a base-64 encoded (PEM format

Configuring Basic Provisioning SettingsTo configure basic provisioning settings:1. Go to Onboard > Provisioning Settings and click the General tab.

108 | Configuring Certificate Properties for Device Provisioning Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel The “not valid before” time

Name Description OIDcharacters, respectively).MAC AddressIEEE MAC address of this device. This element may be present multipletimes, if a device has m

nwa_youtube 279Date/Time Format Syntax 279nwadateformat Modifier 279nwatimeformat Modifier 280Date/Time Format String Reference 281Programmer’s Refere

110 | Configuring Provisioning Settings for iOS and OS X Dell Networking W-ClearPass Guest 6.0 | Deployment Guide3. In the Unsupported Device text box

4. In the Profile Security row, select one of the following options from the drop-down list to control how a deviceprovisioning profile may be removed

112 | Configuring Provisioning Settings for Legacy OS X Devices DellNetworking W-ClearPass Guest 6.0 | Deployment Guide3. In the Allow Manual Reconnec

2. To enable provisioning OS X 10.5 and 10.6 devices, mark the check box in the OS X 10.5/6 Devices row.3. In the Before Provisioning text box, enter

114 | Configuring Provisioning Settings for Android Devices Dell Networking W-ClearPass Guest 6.0 | Deployment Guide2. To enable provisioning Windows

2. To enable provisioning Android devices, mark the check box in the Android Devices row.3. In the Android Rootkit Detection drop-down list, choose on

116 | Configuring Options for Legacy OS X, Windows, and Android Devices Dell Networking W-ClearPass Guest 6.0 | Deployment Guide6. In the Before Profi

l Other IP address or hostname… – Select this option to override the hostname or IP address to be specifiedduring device provisioning. The administrat

118 | Configuring Basic Network Access SettingsDell Networking W-ClearPass Guest 6.0 | Deployment GuideAll networks that have been provisioned are inc

2. To edit the network’s basic and wireless network access options, click the Access tab.3. If you need to edit the network’s name, enter the new name

12 | Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

120 | Configuring 802.1X Authentication Network Settings DellNetworking W-ClearPass Guest 6.0 | Deployment Guidel The drop-down list in the OS X Profi

l Configure PEAP with MSCHAPv2 for Onboard devices – Android, Windows, and legacy OS X (10.5/10.6).l Configure EAP-TLS for iOS devices and OS X (10.7

122 | Configuring Mutual Authentication Settings Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel Machine Only – Use computer-only credential

Configuring Trust Settings Manually1. To change the recommended default setting and configure trust settings manually, choose Manually configurecertif

124 | Configuring Windows-Specific Network Settings DellNetworking W-ClearPass Guest 6.0 | Deployment Guide7. In the Windows Trust area, mark the Vali

n Click the Create Network button to make the new network configuration settings take effectn Click the Cancel button to discard your changes and retu

126 | Configuring an iOS Device VPN ConnectionDell Networking W-ClearPass Guest 6.0 | Deployment GuideThis page is used to automatically configure vir

n Shared Secret / Group Name – An optional group name may be specified. A shared secret (pre-shared key) isused to establish the IPSec VPN. Authentica

128 | Configuring an iOS Device EmailAccountDell Networking W-ClearPass Guest 6.0 | Deployment GuideMark the Add this ActiveSync configuration to the

In the Sync Settings group, choose one of the following options from the Days of Mail drop-down list:l No Limitl 1 dayl 3 daysl 1 weekl 2 weeksl 1 mon

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide About this Guide | 13Chapter 1About this GuideDell Networking W-ClearPass Guest provides a si

130 | Resetting Onboard Certificates and ConfigurationDell Networking W-ClearPass Guest 6.0 | Deployment GuideTo enable the passcode policy on all iOS

Select one of the following options in the Reset Type drop-down list:l Delete all client certificates – Removes all client certificates from Certifica

132 | Onboard Troubleshooting DellNetworking W-ClearPass Guest 6.0 | Deployment GuideResolution: When using HTTPS for device provisioning, you must ob

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Configuration | 133Chapter 5ConfigurationDell Networking W-ClearPass Guest’s built-in Configu

134 | Configuring ClearPass Guest AuthenticationDell Networking W-ClearPass Guest 6.0 | Deployment GuideConfiguring ClearPass Guest AuthenticationYou

To use a content item, you can insert a reference to it into any custom HTML editor within the application. To dothis, select the content item you wan

136 | Additional Content Actions Dell Networking W-ClearPass Guest 6.0 | Deployment GuideAfter you have completed the form, click the Fetch Content bu

Customizing Guest ManagerGuest Manager allows the entire guest account provisioning process to be customized. This is useful in manydifferent situatio

138 | Default Settings for Account Creation Dell Networking W-ClearPass Guest 6.0 | Deployment GuideFigure 23: Sample Guest Receipt Showing Aruba as t

n At least one digitn At least one letter and one digitn At least one of each: uppercase letter, lowercase letter, digitn At least one symboln At leas

14 | Contacting Support Dell Networking W-ClearPass Guest 6.0 | Deployment GuideThe following informational icons are used throughout this guide:NOTE:

140 | Default Settings for Account Creation Dell Networking W-ClearPass Guest 6.0 | Deployment GuideFigure 25: Customize Guest Manager Page, Continued

l About Guest Network Access—Allows the text displayed to operators on the Guest Manager start page to becustomized, or removed (if a single hyphen “-

142 | Visitor Account Activation Properties Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel role_id: This field is the role to assign to the

n If expire_after is set and not zero and the account will be activated immediately, then add the value in hoursto the current time to determine the e

144 | Standard Forms and Views Dell Networking W-ClearPass Guest 6.0 | Deployment GuideName Type Visitor Management Function Editable?change_expiratio

Customizing FieldsCustom fields are fields that you define yourself to cater for areas of interest to your organization. You are able todefine custom

146 | Creating a Custom FieldDell Networking W-ClearPass Guest 6.0 | Deployment GuideYou can specify the default properties to use when adding this fi

Click the Save Changes button to complete the creation of a new field. The new field is added at the top of thefield list. To change the position of t

148 | Configuring the Shared Locations and Shared Role Fields Dell Networking W-ClearPass Guest 6.0 | Deployment Guide1. Go to Configuration > Fiel

1. Scroll to the Advanced Properties section of the form and mark the check box in the Advanced row. The formexpands to include the advanced options.2

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Dell Networking W-ClearPass Guest Overview | 15Chapter 2Dell Networking W-ClearPass Guest Ove

150 | Customizing Forms and ViewsDell Networking W-ClearPass Guest 6.0 | Deployment GuideCustomizing Forms and ViewsYou are able to view a list of for

Editing Forms and ViewsYou can change the general properties of a form or view such as its title and description. To edit the form or view,go to Confi

152 | Editing FormsDell Networking W-ClearPass Guest 6.0 | Deployment GuideClick the Delete link for a duplicated form or view to remove the copy. A d

Each field can only appear once on a form. The Field Name selects which underlying field is being represented onthe form.The remainder of the form fie

154 | Form Field EditorDell Networking W-ClearPass Guest 6.0 | Deployment Guidel Check box – A check box is displayed for the field, as shown below:Th

The “Vertical” and “Horizontal” layout styles control whether the check boxes are organized in top-to-bottom orleft-to-right order. The default is “Ve

156 | Form Field EditorDell Networking W-ClearPass Guest 6.0 | Deployment GuideThe text value typed is submitted with the form. If using a date/time p

form is submitted. If the value should be forced, use the Force Value setting under Advanced Properties toensure the value cannot be overridden. For m

158 | Form Field EditorDell Networking W-ClearPass Guest 6.0 | Deployment GuideThe “Vertical” and “Horizontal” layout styles control whether the radio

l Static text (Raw value) – The field’s value is displayed as a non-editable text string. HTML characters in thevalue are not escaped, which allows yo

16 | Visitor Access Scenarios Dell Networking W-ClearPass Guest 6.0 | Deployment GuideClearPass Guest integrates with all leading wireless and NAC sol

160 | Form Field EditorDell Networking W-ClearPass Guest 6.0 | Deployment GuideTo set the value of this field, use the Initial Value option in the For

l Submit button – The field is displayed as a clickable form submit button, with the label of the field as the labelof the button.The description is n

162 | Form Validation Properties Dell Networking W-ClearPass Guest 6.0 | Deployment GuideForm Validation PropertiesThe form validation properties cont

All fields must be successfully validated before any form processing can take place. This ensures that the formprocessing always has user input that i

164 | Examples of Form field Validation Dell Networking W-ClearPass Guest 6.0 | Deployment GuideThe reason for this is that in this case, the validati

Advanced Form Field PropertiesThe Advanced Properties control certain optional form processing behaviors. You can also specify JavaScriptexpressions t

166 | Form Field Validation Processing Sequence Dell Networking W-ClearPass Guest 6.0 | Deployment Guideand phone numbers was imported for pre-registr

In this case, the Conversion function is set to NwaConvertOptionalDateTime to convert the string timerepresentation from the form field (for example,

168 | Form Field Validation Processing Sequence Dell Networking W-ClearPass Guest 6.0 | Deployment GuideSee "Form Field Conversion Functions"

Editing ViewsA view consists of one or more columns, each of which contains a single field. You can change which fields aredisplayed and how each fiel

Figure 2: Reference network diagram for visitor accessThe network administrator, operators, and visitors may use different network interfaces to acces

170 | View Field Editor Dell Networking W-ClearPass Guest 6.0 | Deployment Guide.Each column in a view displays the value of a single field.To use the

The Display Expression is a JavaScript expression that is used to generate the contents of the column. Generally, thisis a simple expression that retu

172 | Creating a Self-Registration PageDell Networking W-ClearPass Guest 6.0 | Deployment GuideFigure 27: Sequence diagram for guest self-registration

The Register Page is the name of a page that does not already exist. There are no spaces in this name. This pagename will become part of the URL used

174 | Configuring Basic Properties for Self-Registration Dell Networking W-ClearPass Guest 6.0 | Deployment GuideFigure 28: Guest Self-Registration Wo

Paying for AccessIf you select a standalone self -registration, (No parent- standalone) option you can also configure the Hotspotoption. You can confi

176 | Editing Registration Page Properties Dell Networking W-ClearPass Guest 6.0 | Deployment GuideAs another example, the network address 192.168.2.0

Click the Save Changes button to return to the process diagram for self-registration.Click the Save and Continue button to update the self-registratio

178 | Editing Guest Receipt Page Properties Dell Networking W-ClearPass Guest 6.0 | Deployment GuideTo create the multiple accounts that all use the s

.Enabling Sponsor Confirmation for Role SelectionYou can allow the sponsor to choose the role for the user account at the time the sponsor approves th

18 | AAA Framework Dell Networking W-ClearPass Guest 6.0 | Deployment GuideClearPass Guest is part of your network’s core infrastructure and manages g

180 | Enabling Sponsor Confirmation for Role Selection Dell Networking W-ClearPass Guest 6.0 | Deployment Guide3. In the Sponsorship Confirmation area

9. In the Account Role drop-down list, the sponsor chooses the role for the guest, then clicks the Confirm button.Editing Download and Print Actions f

182 | Editing SMS Delivery of Guest Receipts Dell Networking W-ClearPass Guest 6.0 | Deployment GuideWhen email delivery is enabled, the following opt

l Disable sending guest receipts by SMS – SMS receipts are never sent for a guest registration.l Always auto-send guest receipts by SMS – An SMS recei

184 | Editing Login Page Properties Dell Networking W-ClearPass Guest 6.0 | Deployment GuideIf automatic guest login is not enabled, the submit button

The login page consists of two separate parts: the login form page, and a login message page.The login form page contains a form prompting for the gue

186 | Self-Service Portal Properties Dell Networking W-ClearPass Guest 6.0 | Deployment GuideThe login delay can be set; this is the time period, in s

To adjust the user interface, use the override check boxes to display additional fields on the form. These fields allowyou to customize all text and H

188 | Resetting Passwords with the Self-Service Portal Dell Networking W-ClearPass Guest 6.0 | Deployment GuideClicking the I’ve forgotten my passwor

Selecting a different value for the “Required Field” allows other fields of the visitor account to be checked. Thesefields should be part of the regis

l A landing page is displayed to the user [2] which allows them to log in to the NAS [3], [4] using the login nameand password of their guest account.

190 | Configuring Email ReceiptsDell Networking W-ClearPass Guest 6.0 | Deployment Guide3. Scroll to the Email Delivery section of the form and choose

Figure 30: Customize Email Receipt page1. The Subject Line may contain template code, including references to guest account fields. The default value,

192 | About Customizing SMTP Email Receipt Fields Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel Always send using ‘cc:’ – The Copies To li

l smtp_template_id – This field specifies the print template ID to use for the email receipt. If blank or unset, thedefault value from the email recei

194 | Customizing Print TemplatesDell Networking W-ClearPass Guest 6.0 | Deployment Guidel smtp_warn_before_cc_action – This field overrides how copie

This section is followed by three other sections: the body, the header and the footer. Each section must be writtenin HTML. There is provision in each

196 | Print Template WizardDell Networking W-ClearPass Guest 6.0 | Deployment GuidePrint Template WizardThe Create new print template using wizard lin

NOTE: If you use the wizard to edit a print template after changes have been made to it outside the wizard, those changes willbe lost. This is indicat

198 | Customize SMS Receipt Dell Networking W-ClearPass Guest 6.0 | Deployment Guiden Update access – the print template is visible in the list, and m

SMS Receipt FieldsThe behavior of SMS receipt operations can be customized with certain guest account fields. You can override globalsettings by setti

2 | DellNetworking W-ClearPass Guest 6.0 | Deployment GuideCopyright© 2013 Aruba Networks, Inc. Aruba Networks trademarks include , Aruba Networks®, A

20 | Visitor Management Terminology Dell Networking W-ClearPass Guest 6.0 | Deployment GuideFeature Refer to…Creation" on page 141Define unlimite

200 | Create the Print Template Dell Networking W-ClearPass Guest 6.0 | Deployment Guidean existing scratch card template.1. Navigate to Configuration

Customize the Guest Accounts FormNext, modify the Guest Accounts form to add a flag that to allows access-code based authentication.1. Navigate to Con

202 | Create the Access Code Guest Accounts Dell Networking W-ClearPass Guest 6.0 | Deployment Guide3. Click Create Accounts to display the Finished C

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Hotspot Manager | 203Chapter 6Hotspot ManagerThe Hotspot Manager controls self-provisioned gu

204 | Managing the Hotspot Sign-up InterfaceDell Networking W-ClearPass Guest 6.0 | Deployment GuideFigure 33: Guest self-provisioningl Your customer

The Enable visitor access self-provisioning check box must be ticked for self-provisioning to be available.The Require HTTPS field, when enabled, redi

206 | Web Site Look-and-Feel DellNetworking W-ClearPass Guest 6.0 | Deployment Guide<noscript><a href="https://guest.spiffywidgets.com/

l To create or edit an existing plan, see "Editing or Creating a Hotspot Plan " on page 207.l To delete a plan, click the Delete button in t

208 | Editing or Creating a Hotspot PlanDell Networking W-ClearPass Guest 6.0 | Deployment Guide2. In the Plan Details area, enter a name for the plan

5. Complete the rest of the fields appropriately for your organization’s needs, then click Create Plan or Edit Plan.The Manage Hotspot Plans list open

Term ExplanationField In a user interface or database, a single item of information about a user account.Form In a user interface, a collection of edi

210 | Managing Existing Transaction Processors Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel Production Environment URLl Shared Secretl Si

title shown on the invoice and how the invoice number is created. You can also customize the currency displayed onthe invoice.To customize the hotspot

212 | Customizing Visitor Sign-Up Page OneDell Networking W-ClearPass Guest 6.0 | Deployment GuideCustomizing Visitor Sign-Up Page OnePage one of the

Page two of the guest self-provisioning process asks the guest to provide their personal details and payment method.The example below shows the defaul

214 | Customizing Visitor Sign-Up Page TwoDell Networking W-ClearPass Guest 6.0 | Deployment GuideTo customize how the “Your Details” page is displaye

See "Smarty Template Syntax" on page 264 for details about the template syntax you may use to format the contenton this page.Customizing Vis

216 | Customizing Visitor Sign-Up Page ThreeDell Networking W-ClearPass Guest 6.0 | Deployment GuideTo customize how the “Your Receipt” page is displa

See "Smarty Template Syntax" on page 264 for details about the template syntax you may use to format the contenton this page.Viewing the Hot

218 | Viewing the Hotspot User Interface Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Administration | 219Chapter 7AdministrationThe Administration module provides tools used by a

22 | Site Preparation Checklist Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel Physical location – rack space, power and cooling requiremen

220 | AirGroup ServicesDell Networking W-ClearPass Guest 6.0 | Deployment GuideAirGroup ServicesThis section describes configuration options for the A

6. In the Attempts row, enter the maximum number of times the system should attempt to send an AirGroupmessage.7. Click Save Configuration.Creating Ai

222 | Import ConfigurationDell Networking W-ClearPass Guest 6.0 | Deployment GuideFigure 35: Data Retention Policy pageSelect Enable to enable the dat

To use the Upload File form, click the Browse button in the Backup File row to navigate to and select thebackup file you want to restore. To use the S

224 | Configuring PluginsDell Networking W-ClearPass Guest 6.0 | Deployment GuideTo access the Available Plugins list, navigate to Administration >

To undo any changes to the plugin’s configuration, click the plugin’s Restore default configuration link. Theplugin’s configuration is restored to th

226 | Configuring the Dell W-ClearPass Skin Plugin Dell Networking W-ClearPass Guest 6.0 | Deployment Guide5. Review the differences between the curre

click its Enable link. If you prefer to use the standard Dell ClearPass skin, navigate to it in the Available Plugins listand click its Enable link.Th

228 | SMS ServicesDell Networking W-ClearPass Guest 6.0 | Deployment Guidel Auto-Send Field – Select a guest account field which, if set to a non-empt

2. To work with a gateway, click its row in the list. The gateway’s row expands to include the Edit, Duplicate,Delete, Make Default, and Send SMS opti

Security Policy ConsiderationsTo ensure that your network remains secure, decisions have to be made regarding guest access:l Do you wish to segregate

230 | Creating a New SMS Gateway Dell Networking W-ClearPass Guest 6.0 | Deployment Guide3. In the SMS Gateway field, if you choose Custom HTTP Handle

8. In the Mobile Settings area, if your country uses a national dialing prefix such as “0”, you may enter this in theNational Prefix row. When sending

232 | Sending an SMSDell Networking W-ClearPass Guest 6.0 | Deployment Guide4. In the Service Settings area, you may edit the Display Name.5. When you

.2. Complete the form by typing in the SMS message and entering the mobile phone number that you are sendingthe SMS to. The maximum length for the mes

234 | SMS Receipt Options Dell Networking W-ClearPass Guest 6.0 | Deployment GuideDell Networking W-ClearPass Guest may be configured to automatically

2. To filter the list, click the Display Lists tab above the form. The form expands to include the Carrier Listsoptions. Use this drop-down list to sp

236 | Support ServicesDell Networking W-ClearPass Guest 6.0 | Deployment Guide7. (Optional) In the Country field, enter the country where the carrier’

Viewing the Application LogTo view events and messages generated by the application, go to Administration > Support > Application Log.The Applic

238 | Exporting the Application Log Dell Networking W-ClearPass Guest 6.0 | Deployment GuideThe Application Log lists the events, messages, and config

Contacting SupportTo view contact information for Dell Support, go to Administration > Support > Contact Support. The ContactSupport page opens.

24 | Documentation and User AssistanceDell Networking W-ClearPass Guest 6.0 | Deployment GuideDocumentation and User AssistanceThis section describes

240 | Viewing Documentation DellNetworking W-ClearPass Guest 6.0 | Deployment Guide6. Click a result link. The online help opens in a separate browser

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Operator Logins | 241Chapter 8Operator LoginsAn operator is a company’s staff member who is a

242 | Role-Based AccessControl for Multiple Operator Profiles Dell Networking W-ClearPass Guest 6.0 | Deployment GuideYour profile may only allow you

The fields in the first area of the form identify the operator profile and capture any optional information:1. You must enter a name for this profile

244 | Creating an Operator ProfileDell Networking W-ClearPass Guest 6.0 | Deployment GuideIf one or more roles are selected, then only those roles wil

6. In the Account Limit row, you can enter a number to specify the maximum number of accounts an operator cancreate. Disabled accounts are included in

246 | Operator Profile Privileges Dell Networking W-ClearPass Guest 6.0 | Deployment GuideTo specify that an operator profile should use a different f

l Importing guest accountsl Listing guest accountsl Managing customization of guest accountsl Managing print templatesl Removing or disabling guest ac

248 | Creating a New Operator Dell Networking W-ClearPass Guest 6.0 | Deployment GuideCreating a New OperatorTo create a new operator or administrator

Manage LDAP Operator Authentication ServersDell Networking W-ClearPass Guest supports a flexible authentication mechanism that can be readily adapted

Field HelpThe ClearPass Guest user interface has field help built into every form. The field help provides a short summary ofthe purpose of the field

250 | Creating an LDAP ServerDell Networking W-ClearPass Guest 6.0 | Deployment GuideServer Type Required Configuration ParametersMicrosoft Active Dir

authentication is successful, the operator profile assigned to the username will be displayed. If the authenticationfails, an error message will be di

252 | LDAP Operator Server Troubleshooting Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel Ping—Sends a ping message (echo request) to the L

You can also verify operator authentication when you create a new LDAP server configuration using the TestSettings button on the LDAP Configuration fo

254 | LDAP Translation RulesDell Networking W-ClearPass Guest 6.0 | Deployment GuideError Data Reason701 Account has expired773 User must reset passwo

3. Select the Enabled check box to enable this rule once you have created it. If you do not select this check box,the rule you create will appear in t

256 | Custom LDAP Translation Processing Dell Networking W-ClearPass Guest 6.0 | Deployment GuideTranslation rules are processed in order, until a mat

The Custom rule is:{strip}{if stripos($user.memberof, "CN=Administrators")!==false}1{elseif date('H') >= 8 && date(&apo

258 | Custom Login Message Dell Networking W-ClearPass Guest 6.0 | Deployment GuideYou are able to configure a message on the login screen that will b

requires a username and password.</p><p>If you don’t have a login, <br><a href="http://www.arubanetworks.com/">conta

26 | Use of Cookies Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

260 | Automatic Logout DellNetworking W-ClearPass Guest 6.0 | Deployment Guide

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Reference | 261Chapter 9ReferenceThis chapter includes the following sections:l "Basic H

262 | Standard HTML Styles Dell Networking W-ClearPass Guest 6.0 | Deployment GuideItem HTML Syntax</ul><ol><li>List item text</l

Class Name Applies To DescriptionnwaIndent Tables Indent style used in tablesnwaLayout TablesUsed when you want to lay out material in a table without

264 | Smarty Template Syntax Dell Networking W-ClearPass Guest 6.0 | Deployment GuideSmarty Template SyntaxDell Networking W-ClearPass Guest’s user in

<!-- No user name, no table row -->{/if}The condition tested in the {if} … {/if} block should be a valid PHP expression. The {else} tag does not

266 | Modifiers Dell Networking W-ClearPass Guest 6.0 | Deployment GuideThe content after a {foreachelse} tag is included only if the {foreach} block

Smarty registered template function. Displays the value of a variable.Use the following Smarty syntax to print a variable’s contents:{dump var=$var_to

268 | nwa_icontext DellNetworking W-ClearPass Guest 6.0 | Deployment Guidel The “icon” parameter is the SRC to the image of the icon. This should norm

The “struct” parameter, if specified, uses a standard result type. If the “error” key is set and non-zero, the “type”parameter is set to the value err

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Guest Manager | 27Chapter 3Guest ManagerThe ability to easily create and manage guest account

270 | ChangeToRole() Dell Networking W-ClearPass Guest 6.0 | Deployment GuideThis template function does not generate any output if the _assign parame

See "GetTraffic() " on page 274 for details on how to specify the time interval.GetCallingStationTraffic()GetCallingStationTraffic($callings

272 | GetIpAddressCurrentSession() Dell Networking W-ClearPass Guest 6.0 | Deployment Guide'nasportid' => '','nasporttype&

processing a HTTP request, the current client IP address is assumed(from $_SERVER['REMOTE_ADDR']).Specifying an empty value for the IP addre

274 | GetTraffic() Dell Networking W-ClearPass Guest 6.0 | Deployment GuideAs well as the criteria specified, the time interval specified by $from_tim

Looks up the first login time for the specified username.The username attribute is looked up automatically from the RADIUS Access-Request (User-Name a

276 | nwa_makeid Dell Networking W-ClearPass Guest 6.0 | Deployment GuideSmarty registered template function. Adds various kinds of visual effects to

When used with the “block” parameter, the {nwa_nav} control does not generate any HTML. When used with the“type” parameter, the {nwa_nav} control uses

278 | nwa_privilege Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel The ‘name’ parameter specifies a plugin name, or plugin filename.l The ‘

l The numbered parameters are expanded in the translated string with the positional arguments %1, %2 and soforth.nwa_userpref{nwa_userpref …}Smarty te

28 | About Guest Management Processes Dell Networking W-ClearPass Guest 6.0 | Deployment GuideAbout Guest Management ProcessesThere are two major ways

280 | nwatimeformat Modifier Dell Networking W-ClearPass Guest 6.0 | Deployment Guidesuch as Spanish that use non-ASCII characters.The full list of sp

{$u.expire_postlogin|nwatimeformat:"minutes_to_natural"}The other formats accepted for this modifier are the same as those described for the

282 | Programmer’s Reference Dell Networking W-ClearPass Guest 6.0 | Deployment Guide%XPreferred time representation for the current locale, without t

l If an array, the 0 and 1 index values are used for false and true values.l Otherwise, the string values “true” and “false” are returned.NwaByteForma

284 | NwaGenerateRandomPasswordMix Dell Networking W-ClearPass Guest 6.0 | Deployment GuideCreates a password based on a format string. For details on

$options may be specified to control additional parsing options described in the table below.Function Descriptionfs The field separator character (def

286 | NwaSmsIsValidPhoneNumber Dell Networking W-ClearPassGuest 6.0 | Deployment GuideGenerates a random password of at least $len characters in lengt

Option Description$range_lookupSpecifies whether to find an exact or approximate match.If true (default), assumes the table is sorted and returns eith

288 | GuestManager Standard Fields Dell Networking W-ClearPass Guest 6.0 | Deployment GuideField Descriptionchange_expiration and guest_enable forms.

Field Descriptionthat have a username matching the account username. This option requires the NAS tosupport RFC 3576 dynamic authorization. See "

The NAS performs authentication and authorization for the guest in ClearPass Guest. Once authorized, the guest isthen able to access the network.See&q

290 | GuestManager Standard Fields Dell Networking W-ClearPass Guest 6.0 | Deployment GuideField Descriptionhttp_user_agentString. Identifies the Web

Field Descriptionl “password” to use the value from the password field;l Any other value leaves the password unmodified.This field controls account cr

292 | GuestManager Standard Fields Dell Networking W-ClearPass Guest 6.0 | Deployment GuideField Descriptionlength.num_accountsInteger. The number of

Field Descriptiondigits (a through z and 0 through 9). The length of the password is specified by therandom_password_length field.l nwa_alnum_password

294 | Hotspot Standard Fields Dell Networking W-ClearPass Guest 6.0 | Deployment GuideField Descriptionrandom_username_pictureString. The format strin

Field Descriptionaddress String. The visitor’s street address.card_codeString. The 3 or 4 digit cardholder verification code printed on the credit car

296 | SMTP Services Standard Fields Dell Networking W-ClearPass Guest 6.0 | Deployment GuideField Descriptionsms_auto_send_fieldString. This field spe

Field Descriptionsmtp_enabledString. This field may be set to a non-zero value to enable sending an email receipt.If unset, the default value from the

298 | Form Field Validation Functions DellNetworking W-ClearPass Guest 6.0 | Deployment Guidepassword_picture field.The picture string is used as the

l IsNonEmpty – Checks that the value is a non-empty string (length non-zero and not all whitespace), or a non-empty array.l IsNonNegative – Checks tha

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide | 3ContentsAbout this Guide 13Audience 13Conventions 13Contacting Support 14Dell Networking W

30 | Creating a Guest Account ReceiptDell Networking W-ClearPass Guest 6.0 | Deployment GuideYou can specify the account activation and expiration tim

300 | Form Field Validation Functions DellNetworking W-ClearPass Guest 6.0 | Deployment Guidel IsValidLdapAttribute – Checks that the value is a valid

l NwaCaptchaIsValid – Checks that the value matches the security code generated in the CAPTCHA image. Thisvalidator should only be used with the stand

302 | Form Field Display Formatting Functions Dell Networking W-ClearPass Guest 6.0 | Deployment GuideFunction Descriptiondefined as 1,024 bytes, 1 MB

Function Descriptionl negative_sign – sign for negative valuesl n_sign_posn – position of sign for negative values (0..4)Forformatting for monetary am

304 | LDAP Standard Attributes for User Class Dell Networking W-ClearPass Guest 6.0 | Deployment GuideValue Descriptionvalue,if_true,if_false[,if_unde

l logonCount: The logonCount property counts the number of successful times the user tried to log on to thisaccount.l mail: The mail property is a sin

306 | Regular Expressions Dell Networking W-ClearPass Guest 6.0 | Deployment GuideRegex Matches\d Any decimal digit\D Any character that is not a deci

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Glossary | 307Chapter 10Glossary802.1X IEEE standard for port-based network access control.Ac

308 | Glossary Dell Networking W-ClearPass Guest 6.0 | Deployment GuideDisconnect-Request RADIUS packet type sent to a NAS requesting that a user or s

PKI Public-key infrastructure. Security technology based on digital certificates and the assurances provided by strongcryptography. See alsocertificat

NOTE: The Create Guest Accounts form (create_multi) may be customized by adding new fields, or modifying or removing theexisting fields. See "Cus

310 | Glossary Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Index | 311Index11024-bit RSA 10822048-bit RSA 108AAAA 18access control, print templates 197a

device limit in AirGroup 247device provisioning 79iOS and OS X provisioning 110Kernel plugin 225legacy OS X provisioning 112network settings 117operat

importing 57personal, AirGroup 55provisioning configuration 106shared 53viewing 55disablingSMTP carrier 234disconnecting session 60-61documentation, v

expire_postlogin 143expire_time 142, 289expire_usage 143, 289first_name 295hotspot_plan_id 295hotspot_plan_name 295id 290ip_address 290last_name 295mo

Validation properties 162Value conversion 166Value formatter 167Visible If 168form fieldsadvanced properties 165CAPTCHA 153check box 154checklist 154c

hotspot management 203captive portal 205creating plan 207customer information 210customizing invoice 210customizing receipt 216customizing selection i

password options 243user roles 243Operator loginsLDAP 248operator profiles 21, 241-242automatic logout 259creating 242privileges 246operators 21creati

selectingmobile carrier 232self-registrationcreating device 51editing 177self-service portal 186auto login 187password generation 187resetting passwor

troubleshootingapplication integrity check 224Onboard 131TSV 43Uuploadingcode-signing certificate 101content 135user database 21Vviewingapplication lo

32 | Creating a Single Password for Multiple Accounts Dell Networking W-ClearPass Guest 6.0 | Deployment GuideTo print the receipts, select an appropr

320 | Index Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

To include the Password field on the Create Multiple Guest Accounts form:1. Go to Configuration > Forms & Views. Click the create_multi row, th

34 | Managing Guest AccountsDell Networking W-ClearPass Guest 6.0 | Deployment GuideManaging Guest AccountsUse the Guest Manager Accounts list view to

The Username, Role, State, Activation, and Expiration columns display information about the visitor accounts thathave been created:l The value in the

36 | Managing Guest AccountsDell Networking W-ClearPass Guest 6.0 | Deployment GuideNOTE: When the list contains numerous user accounts, consider usin

Select the appropriate Action radio button, and click Make Changes to disable or delete the account.If you wish to have automatic disconnect messages

38 | Managing Multiple Guest AccountsDell Networking W-ClearPass Guest 6.0 | Deployment GuideClick Update Account to update the properties of the gues

Operator Meaning Additional Information= is equal toYou may search for multiple values when using the equality(=) or inequality !=) operators. To spec

4 | Dell Networking W-ClearPass Guest 6.0 | Deployment GuideManaging Multiple Guest Accounts 38Importing Guest Accounts 40Exporting Guest Account Info

40 | Importing Guest AccountsDell Networking W-ClearPass Guest 6.0 | Deployment GuideThe Edit Guest Accounts form may be customized by adding new fiel

n Automatically detect format (This default option recognizes guest accounts exported from ClearPass PolicyManager in XML format)n XMLn Comma separate

42 | Importing Guest AccountsDell Networking W-ClearPass Guest 6.0 | Deployment GuideTo complete the Match Fields form, make a selection from each of

l Click the Existing link to select all existing user accounts in the list.Click the Create Accounts button to finish the import process. The selected

44 | MAC Authentication in ClearPassGuest Dell Networking W-ClearPass Guest 6.0 | Deployment Guide<GuestUserTags tagValue="ff" tagName=&q

The Guest Manager Devices page opens.All devices created by one of methods described in the following section are listed. Options on the form let youc

46 | Changing a Device’s Expiration Date Dell Networking W-ClearPass Guest 6.0 | Deployment GuideOperator Meaning Additional Information= is equal toY

l If you choose Account Expires at a specified time, the Expiration Time row is added to the form. Click thebutton to open the calendar picker. In the

48 | Editing a Device Dell Networking W-ClearPass Guest 6.0 | Deployment Guide1. You can change the device’s address in the MAC Address row.If you nee

l If you choose Account Expires at a specified time, the Expiration Time row is added to the form. Click thebutton to open the calendar picker. In the

Revoking Credentials to Prevent Network Access 70Re-Provisioning a Device 71Network Requirements for Onboard 71Using Same SSID for Provisioning and Pr

50 | Creating Devices Manually in ClearPass Guest Dell Networking W-ClearPass Guest 6.0 | Deployment GuideCreating Devices Manually in ClearPass Guest

6. To set the account’s expiration time, choose one of the options in the Account Expiration drop-down list. Youmay set the account to never expire, o

52 | Creating Devices During Self-Registration - Paired Accounts Dell Networking W-ClearPass Guest 6.0 | Deployment GuideFigure 9: Modify fieldsl Edit

NOTE: If you delete the base account, all of its pairings will also be deleted. If RFC-3576 has been configured, all pairs will be loggedout.AirGroup

54 | Registering Groups of Devices or Services Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel AP FQLNs should be configured in the format &

3. To edit properties of a shared device, click the Edit link for the device. The row expands to include the EditShared Device form. You can modify th

56 | Automatically Registering MAC Devices in ClearPass Policy Manager Dell Networking W-ClearPass Guest 6.0 | Deployment Guide1. Go to Guest > Lis

3. In the Policy Manager row, mark the check box to register the guest’s MAC address with ClearPass PolicyManager. The Advanced row is added to the fo

58 | User Detection on Landing Pages Dell Networking W-ClearPass Guest 6.0 | Deployment GuideThis can be expanded if you create multiple MAC fields. N

and the first line of the footer be:{if!$guest_receipt.u.username}</div>{/if}Active Sessions ManagementThe RADIUS server maintains a list of ac

6 | Dell Networking W-ClearPass Guest 6.0 | Deployment GuideConfiguring Reconnect Behavior for iOS and OS X 111Configuring Provisioning Settings for L

60 | Session States Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel If the NAS equipment has RFC 3576 support, you can disconnect or dynamic

RFC 3576 Dynamic AuthorizationDynamic authorization describes the ability to make changes to a visitor account’s session while it is in progress.This

62 | Disconnecting Multiple Active SessionsDell Networking W-ClearPass Guest 6.0 | Deployment GuideOperator Meaning Additional Information= is equal t

Sending Multiple SMS AlertsThe SMS tab on the Active Sessions page lets you send an SMS alert message to all active sessions that have a validphone nu

64 | About SMS Guest Account ReceiptsDell Networking W-ClearPass Guest 6.0 | Deployment Guide

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Onboard | 65Chapter 4OnboardOnboarding is the process of preparing a device for use on an ent

66 | Onboard Deployment Checklist Dell Networking W-ClearPass Guest 6.0 | Deployment GuideOnboard Deployment ChecklistTable 12 lists planning, configu

Deployment Step ReferenceConfigure device provisioning settings.l Select certificate options for device provisioning.Select which device types should

68 | Supported Platforms Dell Networking W-ClearPass Guest 6.0 | Deployment GuideFeature UsesAndroid devices.and modell Control the user interface dis

a certificate authority (CA). The following sections explain how the certificate authority works, and whichcertificates are used in this process.Certi

Example: 149Customizing Forms and Views 150Editing Forms and Views 151Duplicating Forms and Views 151Editing Forms 152Form Field Editor 152Form Valida

70 | Certificate Configuration in a Cluster Dell Networking W-ClearPass Guest 6.0 | Deployment GuideCertificate Configuration in a ClusterWhen you use

Re-Provisioning a DeviceBecause “bring your own” devices are not under the complete control of the network administrator, it is possible forunexpected

72 | Configuring Online Certificate Status Protocol Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel Configure the provisioning SSID to use P

Figure 11: ClearPass Onboard Network ArchitectureThe sequence of events shown in Figure 11 is:1. Users bring their own device to the enterprise.2. The

74 | Network Architecture for Onboard when Using ClearPass Guest Dell Networking W-ClearPass Guest 6.0 | Deployment Guide1. Users bring different kind

The ClearPass Onboard ProcessDevices Supporting Over-the-Air ProvisioningDell Networking W-ClearPass Onboard supports secure device provisioning for i

76 | Devices Supporting Onboard Provisioning Dell Networking W-ClearPass Guest 6.0 | Deployment Guide1. When a BYOD device first joins the provisionin

Figure 17: ClearPass Onboard Process for Onboard-Capable DevicesThe Onboard process is divided into three stages:1. Pre-provisioning. This step is onl

78 | Managing Provisioned ApplicationsDell Networking W-ClearPass Guest 6.0 | Deployment Guide2. The Onboard portal is displayed. The user’s device ty

2. To upload applications, click the Content Manager link above the form.3. To select applications to install, mark their check boxes, then click Save

8 | Dell Networking W-ClearPass Guest 6.0 | Deployment GuideConfiguring Access Code Logins 199Customize Random Username and Passwords 199Create the Pr

80 | Using the {nwa_mdps_config} Template Function Dell Networking W-ClearPass Guest 6.0 | Deployment GuideTo modify the instructions provided to user

Name Descriptionwifi_ssidName of the wireless network. See "Configuring Basic Network Access Settings " on page118.Example:Connect to the ne

82 | Setting Up a Root Certificate Authority DellNetworking W-ClearPass Guest 6.0 | Deployment GuideThe Name and Description fields are used internall

NOTE: If you intend to change any of the root certificate's distinguished name properties, and you have previously created any clientor server ce

84 | Setting Up an Intermediate Certificate Authority Dell Networking W-ClearPass Guest 6.0 | Deployment Guidel The Key Type drop-down list specifies

In the Identity section of the form:l Enter values in the Country, State, Locality, Organization, and Organizational Unit text fields that correspondt

86 | Obtaining a Certificate for the Certificate Authority DellNetworking W-ClearPass Guest 6.0 | Deployment GuideClick the Create Certificate Request

Click the link to submit a request using a base-64-encoded CMC or PKCS #10 file. The Submit a CertificateRequest or Renewal Request page is displayed.

88 | Installing a Certificate Authority’s Certificate Dell Networking W-ClearPass Guest 6.0 | Deployment GuideIf the Certificate Pending page is displ

3. Select one of the radio buttons to either copy and paste the certificate as encoded text or browse to the file toupload. The form expands to includ

About SMS Guest Account Receipts 233SMS Receipt Options 234Working with the SMTP Carrier List 234Support Services 236Viewing the Application Log 237Ex

90 | Renewing the Certificate Authority’s Certificate Dell Networking W-ClearPass Guest 6.0 | Deployment Guide6. Click the Upload Certificate button t

In the Onboard Device Certificates section of the form, specify a value in the Minimum Period and MaximumPeriod fields that is appropriate for your or

92 | Uploading Certificates for the Certificate AuthorityDell Networking W-ClearPass Guest 6.0 | Deployment GuideTo export a certificate:1. Click the

Creating a CertificateFrom the Certificate Management page, click the Generate a new certificate signing request link to access theCertificate Request

94 | Specifying the Identity of the Certificate Subject Dell Networking W-ClearPassGuest 6.0 | Deployment Guidel Organizational Unitl Common Name – th

Name DescriptionDevice Serial Serial number of the device.MAC Address IEEE MAC address of this device.Product NameProduct string identifying the devic

96 | Searching for Certificates in the List Dell Networking W-ClearPass Guest 6.0 | Deployment GuideCertificate Type “Type” Column NotesRoot certifica

Working with Certificates in the ListClick on a certificate to select it. You can then select from one of these actions:l View certificate – Displays

98 | Working with Certificates in the List Dell Networking W-ClearPass Guest 6.0 | Deployment GuideMark the Revoke this client certificate check box t

The Delete Certificate form is displayed. Mark the Delete this client certificate check box to confirm thecertificate’s deletion, and then click the D