Quick Reference Guide

Manage Rogue Access Points, Guest Network Access, and Users
112
ProSAFE Wireless Controller WC9500
There are two types of portal settings:
• Guest portal. Use this portal if all wireless users are allowed to access the network by
supplying only their email address. You do not need to define user names and passwords
for these users.
• Captive portal. Use this portal type if wireless users need to supply their login name and
password before being allowing access the network. Y
ou need to define user names and
passwords for these users (see Manage Users, Accounts, and Passwords on page 116).
Note: You cannot configure captive portal authentication if the network
authentication uses an external RADIUS server. That is, if you configure
an external RADIUS server with WPA, WPA2, or WPA & WPA2 (or if you
use legacy 802.1X), you cannot configure captive portal authentication;
the network authentication needs to be Open System, Shared Key,
WPA-PSK, WPA2-PSK, or WPA-PSK & WPA2-PSK (see Network
Authentication and Data Encryption Options on page 77).
Note these guidelines for captive portal user authentication and accounting through an
external RADIUS server:
• You can use either the basic-Auth RADIUS server or a RADIUS server of an advanced
authentication group.
You cannot use the external LDAP server.
• The wireless controller uses CHAP or MS-CHAP as the authentication protocol with the
authentication server.
• The following RADIUS authentication variables are supported on the wireless controller:
- User-Name
- User-Password
- WISPr-Session-T
erminate-T
ime
- Session-Timeout
If you change the values for any of these variables before the wireless client
disassociates from the access point, the new values are not updated on the wireless
controller.
• A managed access point can send accounting information to the external RADIUS server
because the wireless controller functions as a proxy RADIUS client for the managed
access point. The following RADIUS accounting variables are supported on the wireless
controller:
- Acct-Input-Octets
- Acct-Output-Octets
- Acct-Input-Gigawords
- Acct-Input-Gigawords