Specifications

Configuring Authentication
April 15, 2011 Page 19 of 36
Whenenhancedmodeisenabled,PWAwilluseaguestpasswordandguestusernametogrant
networkaccesswithdefaultpolicyprivilegestouserswithoutestablishedloginnamesand
passwords.
Inordertoconfigureguestnetworkingprivileges,youneedtosetthegueststatus,username,and
password.Youcan
setgueststatusfornoauthentication,RADIUSauthentication,ordisabled.
Whenyousetgueststatustonoauthentication,gueststatusisprovidedwithitsassociatedpolicy,
butnoauthenticationtakesplace.WhenyousetgueststatustoRADIUSauthentication,guest
statusisprovidedonlyafterasuccessfulauthenticationtakesplace.
Ifguestnetworkingstatusis
disabled,allsupplicantsmustbeauthenticatedwithavalidusernameandpasswordatthelogin
page.
Table 2describeshowtooptionallyenableguestnetworkingprivileges.
Configuring Convergence End Point (CEP)
ConfiguringCEPconsistsof:
CreatingaCEPdetectiongroupforNonCiscoDetectionCEPtypes
•EnablingtheCEPgroupforCiscoDetection
•SettingtheCEPpolicyperCEPtype
•EnablingCEPontheport
•Settingtheauthenticationmode
Creating a CEP Detection Group
CEPdetectiongroupscanbecreated,deleted,enabled,ordisabled.YoucreateaCEPdetection
groupbyassociating anIDwiththecreatecommand.Onceagroupiscreated,youassociateaCEP
type,IPaddress,protocol,andhighorlowprotocolporttoit.ThetypecanbeH.323,Siemens,
or
SIP.TheIPaddressistheIPaddressoftheCEPdevice.Bydefault,H.323willuse224.0.1.41asits
IPaddressandSiemenswillhavenoIPaddressconfigured.TheprotocolcanbeTCPorUDP.The
highorlowprotocolportisthemaximumorminimumTCP
orUDPporttobeusedbythegroup.
Procedure 4describesthecreationofaCEPdetectiongroup.
Table 2 PWA Guest Networking Privileges Configuration
Task Command(s)
Optionally enable guest status without authentication set pwa gueststatus authnone
Optionally enable guest status with authentication. set pwa gueststatus authradius
Optionally disable guest status set pwa gueststatus disable
Procedure 4 CEP Detection Group Configuration
Step Task Command(s)
1. Create a new CEP detection group or enable,
disable, or delete an existing group.
set cep detection-id id {create | enable |
disable | delete}
2. Specify the CEP type to be associated with the
this group.
set cep detection-id id type {h323 | siemens
| sip}