Release Notes

ManualsBrandsDell ManualsAccess PlatformsW-Clearpass 100 Software

Access Code Logins

Unified Visitor Management

amigopod Technical Note

Revision 1.0

30 September 2010

United States of America

+1 (888) 590-0882

Europe, Middle East & Asia

+34 91 766 57 22

Australia & Pacific

+61 2 8669 1140

http://www.amigopod.com

Summary of content (17 pages)

PAGE 1
Access Code Logins Unified Visitor Management amigopod Technical Note Revision 1.0 30 September 2010 United States of America +1 (888) 590-0882 Europe, Middle East & Asia +34 91 766 57 22 Australia & Pacific +61 2 8669 1140 http://www.amigopod.com Copyright © 2010 amigopod. All rights reserved.
PAGE 2
Access Code Logins Version 1.0 Table of Contents Introduction ..............................................................................................................................3 Audience ..............................................................................................................................3 Document Overview .............................................................................................................3 Disclaimer................................
PAGE 3
Access Code Logins Version 1.0 Introduction This technical note explains the creation of bulk accounts and a login page that require a single access code for access to the network. This method of authentication can be convenient for short-term access where security does not play as important of a role as security. The accounts will be valid for 1 year, or 4 hours after the account first logs on.
PAGE 4
Access Code Logins Version 1.0 Confirming Compatibility Check Plugin Versions Access Code logins requires the following plugin versions:  amigopod RADIUS Services 3.0.4 or later  GuestManager Plugin 3.0.3 To verify you have the correct plugin versions installed, navigate to Administrator > Plugin Manager > Manage Plugins and check the version number in the list. Use the Update Plugins link to download and install updated plugins.
PAGE 5
Access Code Logins Version 1.0 Customizing Guest Manager Customize Random Username and Passwords In this example we will set the random usernames and passwords to be a mix of letters and digits. Navigate to Guest Manager > Customization > Customize Guest Manager. We have chosen an 8 character Random letters and digits username, and a Password Complexity of digits for the password. Note that the generator matching the complexity will also include a mix of upper and lower case letters.
PAGE 6
Access Code Logins Version 1.0 Create a Print Template By default, the print templates include username, password, expiration, as well as other options. For the purpose of access codes, we only want the username presented. Create the Print Template We will base our print template off one of the existing scratch card templates. Navigate to Guest Manager > Customization > Print Templates and select Two-column scratch cards and click Duplicate.
PAGE 7
Access Code Logins Version 1.0 Access Code {$u.username|htmlspecialchars} {if $u.create_result.error} Error {$u.create_result.
PAGE 8
Access Code Logins Version 1.0 Customize Create Multi Create Multi is the screen used to generate accounts with random usernames and passwords. We need to modify it to add a flag to accounts to allow the access-code based authentication. Add username_auth the the Field List Navigate to Guest Manager > Customization > Customize Forms & Views and select create_multi and then click Edit Fields. Look for a field named username_auth. If the field exists, but is not bolded and enabled, click Enable Field.
PAGE 9
Access Code Logins Version 1.0 Create Multiple Accounts With the account generation customized, we can now create our accounts. Create Multi Navigate to Guest Manager > Create Multi (or select Use this form from the previous fields list). We will create 10 accounts that will expire in 1 year, or 4 hours after they first log in, whichever comes first. NOTE Note that the Username Authentication field we added must be selected.
PAGE 10
Access Code Logins Version 1.0 Confirm that the accounts settings are as you expected with respect to letters and digits in the username and password, expiration, and role. Print Cards Select the new print template from the dropdown at the bottom of the table. A new window or tab will open with the cards.
PAGE 11
Access Code Logins NOTE CONFIDENTIAL Version 1.0 Your method of printing and delivery to the customer should define the print template used in production. If you have a label printer, or cards, they should be tested prior to the creation of the actual accounts.
PAGE 12
Access Code Logins Version 1.0 Creating a Web Login Page The web login will need to be customized to hide the password, and check for accounts with the username_auth flag set. Create a Web Login Navigate to RADIUS Services > Web Logins and click Create a new web login page at the bottom of the table. In our example we will create a page called access_codes that has been customized to our liking. In order to provide access-code based authentication, we must also enable the Pre-Auth Check.
PAGE 13
Access Code Logins Version 1.0 We also update the helper text to remove mention of username or password.
PAGE 14
Access Code Logins Version 1.0 Click Save Changes to create the web login. Select Test to open the login page in a new window or tab.
PAGE 15
Access Code Logins Version 1.
PAGE 16
Access Code Logins Version 1.0 Testing Authentication WLAN Controller and Access Point setup Please refer to your WLAN reference documentation where to configure the external redirection URL. Enter the URL as it appeared when clicking Test. As a proof of concept, some of the below steps can be used without being connected to the WLAN. However the test will not do complete a RADIUS authentication to verify the complete setup. Authenticating Connect to the WLAN and open your browser to a web page.
PAGE 17
Access Code Logins Version 1.0 Troubleshooting Invalid username or password If you receive the error Invalid username or password, it could be due to an username that does not exist, which you can check in the List Accounts list. It could also be due to not selecting Allow visitor access using their username only while creating the accounts. To verify the flag, you can add username_auth to the List Accounts column view (guest_users), or the guest_edit form, and then edit the user.