Configuring Access Guardian Access Guardian Application Examples
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 28-100
4 Create the QoS policy list to apply to the user upon successful Captive Portal authentication.
-> policy condition cp-default-C1 source ip Any destination ip Any
-> policy action cp-default-A1
-> policy rule cp-default-R1 condition cp-default-C1 action cp-default-A1
-> policy list cp-default-list type unp
-> policy list cp-default-list rules cp-default-R1
-> qos apply
5 Create a UNP profile named “guest”.
-> unp profile guest
6 Map the UNP profile to an appropriate VLAN.
-> unp profile guest map vlan 30
7 Create another UNP profile to use as a default profile for a UNP port.
-> unp profile def_unp
8 Map the UNP profile to VLAN 10.
-> unp profile def_unp map vlan 10
9 Create a UNP port template to pre-define and apply configuration parameters to the UNP port.
-> unp port-template cp-only-template
10 Set the default profile parameter for the port template to “guest”.
-> unp port-template cp-only-template default-profile guest
Setting the default UNP profile to “guest” will move the clients into VLAN 30 first. Then a policy list
received through Captive Portal authentication is applied to the user (overriding the policy list, if any,
that was previous applied through the “guest” profile).
11 Assign the UNP port template to a UNP port.
-> unp port 1/1/2 port-template cp-only-template
12 Create a Captive Portal profile to pre-define and apply Captive Portal configuration parameters.
-> captive-portal-profile cp-profile
-> captive-portal-profile cp-profile aaa-profile ag-aaa-profile
13 Set the Captive Portal profile parameters for the authentication pass policy list and the success URL.
The Captive Portal IP address is set to 10.123.0.1 by default.
-> captive-portal-profile cp-profile authentication-pass policy-list cp-default
-list
-> captive-portal-profile cp-profile success-redirect-url http://test-cp.com/
success.html
The authentication pass parameter specifies the policy list to apply to the device if Captive Portal
authentication is successful but the RADIUS server does not return a policy list. The success URL
specifies where to redirect the user device after a successful Captive Portal authentication attempt.
To Next Page
Loading...
