Administrator Guide

388 Authentication, Authorization, and Accounting
Captive Portal Configuration Example
The manager of a resort and conference center needs to provide wired
Internet access to each guest room at the resort and in each conference room.
Due to legal reasons, visitors and guests must agree to the resort’s acceptable
use policy to gain network access. Additionally, network access from the
conference rooms must be authenticated. The person who rents the
conference room space receives a list username and password combinations
upon arrival. Hotel employees have their own CP.
The network administrator for the resort and conference center decides to
configure the three CPs Table 10-16 describes.
Configuration Overview
The following steps provide an overview of the process you use to configure
the CP feature. In addition to the following steps, IP Helper/DHCP relay
should be configured (not shown) if routing is enabled so that clients can
obtain an IP address from a DHCP server. Ensure that a DNS server is
configured in the network to resolve domain names in user-entered URLs to
IP addresses. Refer to "Layer-2 and Layer-3 Relay Features" on page 1215 for
further information.
To configure the switch:
Table 10-16. Captive Portal Instances
CP Name Description
Guest Free Internet access is provided in each guest room, but
guests must enter a name and agree to the acceptable use
policy before they can gain access. The manager wants guests
to be redirected to the resort’s home web page upon
successful verification. No logout is required.
Conference Because physical access to the conference rooms is less secure
than access to each guest room, the manager wants to ensure
that people who connect to the network through a port in a
conference room are authenticated. The Conference CP uses
the local database for authentication.
Employee To gain network access, resort employees must enter a
username and password that is stored on a RADIUS server.