Optional Configurations

This section describes guest provisioning options that the administrator can configure. See the following topics for more information:

These options are not configurable by the guest provisioning user.

Restricting one Captive Portal Session for each Guest

You can restrict onecaptive portalA captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users.session for each guest. When a newcaptive portalA captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users.request is received and passes authentication, all users are checked and compared with user names. If a user with the same name already exists and this option is enabled, the second login is denied.

如果客人登录时从一个系统(not log out) and tries to log in again from another system, that guest has to wait for the initial session to expire.

The following procedure describes how to restrictcaptive portalA captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users.authentication for each guest:

1.In theManaged Networknode hierarchy, navigate to theConfiguration > System > Profilestab.

2.SelectWireless LAN.

3.UnderWireless LAN, select and openCaptive Portal Authentication.

4.Add a new or select and existing profile.

5.Select theAllow only one active user sessioncheck box.

6.ClickSubmit.

7.ClickPending Changes.

8.In thePending Changeswindow, select the check box and clickDeploy changes.

The followingCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.command restrictscaptive portalA captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users.authentication for each guest.

(host) [md] (config) #aaa authentication captive-portal <> single-session

Setting Maximum Time for Guest Accounts

You can set the maximum expiration time (in minutes) for guest accounts. If the guest-provisioning user attempt to add a guest account that expires beyond this time period, an error message is displayed and the guest account is created with the maximum time you configured.

If you set the maximum expiration time, it applies to all users in the internal database whether they are guests or not.

The following procedure describes how to configure maximum expiration time for guest accounts.

1.In theManaged Networknode hierarchy, navigate to theConfiguration > Security > Authenticationtab.

2.SelectInternal DB.

3.Under Internal DB Maintenance, enter a value inMaximum Expiration.

4.ClickSubmit.

5.ClickPending Changes.

6.In thePending Changeswindow, select the check box and clickDeploy changes.

The followingCLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions.command configures maximum expiration time for guest accounts.

(host) [md] (config) #local-userdb maximum-expiration