AMIGOPOD PowerConnect W Clearpass 100 Software Guida rapida alla configurazione

Trapeze Networks

Integration Guide

Revision

Date

0.9

27 May 2009

amigopod Head Office amigopod Pty Ltd

Suite 101

349 Pacific Hwy

North Sydney, NSW 2060

Australia

ABN 74 124 753 420

Web www.amigopod.com

Phone +61 2 8669 1140

Fax +61 7 3009 0329

CONFIDENTIAL 2

Table of Contents

Introduction...................................................................................................................................3

Test Environment......................................................................................................................4

Integration.................................................................................................................................5

Amigopod Configuration ...............................................................................................................6

Step 1 – Create RADIUS NAS for Trapeze Controller..............................................................7

Step 2 – Restart RADIUS Services...........................................................................................8

Step 3 – Create a Web-Login Page..........................................................................................9

Step 4 - Review to Web Login Captive Portal page................................................................10

Trapeze MSS Configuration........................................................................................................11

Step 1 – Create RADIUS Definition for amigopod ..................................................................12

Step 2 – Create the Captive Portal service-profile..................................................................13

Step 3 – Enable Logout function for wireless users................................................................13

Step 4 – Enable RADIUS Authentication & Accounting..........................................................14

Step 5 – Modify default portalacl to allow traffic to amigopod.................................................14

Step 6 – Configure Trapeze to redirect new users to amigopod.............................................15

Step 7 – Apply new SSID to radio profile................................................................................15

Step 8 – Save new configuration ............................................................................................15

Testing the Configuration............................................................................................................16

Step 1 – Create a test user account........................................................................................16

Step 2 - Connect to the amigopod wireless network...............................................................17

Step 2 – Confirm DHCP IP Address received.........................................................................18

Step 3 – Confirm session detected by Trapeze Controller......................................................18

Step 4 – Launch Web Browser and login................................................................................19

Step 5 – Confirm the login successful from Trapeze ..............................................................20

Step 6 – Confirm RADIUS debug messages on amigopod ....................................................20

Step 7 – Check User Experience............................................................................................22

Appendix A – Dynamic Authorisation (RFC 3576)......................................................................23

Step 1 – Configure amigopod as a DAC entry........................................................................24

Step 2 – Enable authorization for the amigopod SSID............................................................24

Step 3 – Test Disconnect of authenticated user.....................................................................24

Appendix B – Testing additional RADIUS attributes...................................................................26

Test Setup...............................................................................................................................26

Test Result..............................................................................................................................27

Detailed RADIUS Debug.....................................................................................................28

CONFIDENTIAL 3

Introduction

This document outlines the configuration process on both the Trapeze Networks Mobility

Exchanges (MX) and the amigopod appliance to create a fully integrated Visitor Management

solution. The solution leverages the captive portal functionality built into the Trapeze Mobility

System Software (MSS). Trapeze uses the terminology of Web-Portal to refer to their internal

captive portal functionality and it can be generally defined as follows:

Captive portal allows a wireless client to authenticate using a web-based portal. Captive portals

are typically used in public access wireless hotspots or for hotel in-room Internet access. After a

client associates to the wireless network, their device is assigned an IP address. The client must

start a web browser and pass an authentication check before access to the network is granted.

Captive portal authentication is the simplest form of authentication to use and requires no

software installation or configuration on the client. The username/password exchange is

encrypted using standard SSL encryption.

However, Captive Portal authentication does not provide any form of encryption beyond the

authentication process; to ensure privacy of client data, some form of link-layer encryption (such

as WEP or WPA-PSK) should be used when sensitive data will be sent over the wireless

network.

Amigopod extends the standard Trapeze Web-Portal functionality by providing many advanced

features such as a fully branded user interface, SMS integration for delivery of receipts, bulk

upload of visitors for conference management, self provisioning of users for public space

environments to name a few.

Trapeze Networks have reseller and OEM relationships with several other vendors and

therefore the steps outlined in this document can equally be deployed on these 3rd party

platforms.

Vendor Products amigopod verified Partner Verified

MXR-2, MX-8, MX-216,

MX-200, MX-2800 Yes – 7.0.9.6

WXR100, WX-1200, WX-

2200 Yes -

2350, 2360, 2361, 2382,

MX-2800

RBT-8100, RBT-8110,

RBT-8400,

RBT-8500

CONFIDENTIAL 4

Test Environment

The test environment referenced throughout this integration guide is based on a Trapeze MXR-

2 Mobility Exchange. Although this low end hardware platform has been used, the testing and

therefore this procedure is valid for all hardware variants from Trapeze and their OEM partners

as it is the MSS software that is providing the integration points with amigopod.

The following table shows the software versions used during the integration testing. This

document will be updated in the future if changes in either amigopod or Trapeze subsequent

releases affect the stability of this integration. It is advised that the customer always check for

the latest integration guide available from either amigopod or Trapeze.

Date Tested: May 2009

AmigoPod Version: KernelÆ1.9.6, Radius ServicesÆ1.9.5

Plugins Required: Standard build only

MSS Version: 7.0.9.6

Integration: HTTP Captive Portal

Amigopod was deployed locally on the LAN interface of the Trapeze controller as a VMWare

image running on a test laptop. Although the VMWare image has been used the integration is

equally valid for the amigopod appliance and self installing DVD deployment variants.

MXR-2 IP Address 10.9.4.50

Internet Gateway Address 10.9.4.1

amigopod IP Address 10.9.4.8

amigopod RADIUS port Auth 1812 Acc 1813 (default settings)

The following diagram provides a high level overview of the test lab topology:

CONFIDENTIAL 5

Integration

Although the MXR-2 MSS supports both internal and external Captive portal functionality, this

integration guide will focus on the later as the internal Web-Portal dictates the use of the internal

significant customization as is possible with the amigopod Web Logins feature.

Note: Trapeze now allows for fully customised Captive portal pages to be uploaded to the

controller but this process requires a significant amount of web design and javascript experience

to produce a professional result. One of amigopod’s strongest selling points is the Skin Plugin

technology where the presentation of the User Interface is separated from the mechanics of the

underlying application. This allows amigopod to supply end users with a ready branded Skin for

all amigopod interaction (both Visitor and Administrators) for a small nominal fee at time of

purchase.

The integration will also leverage the MSS’ ability to define and reference external RADIUS

servers for the authentication and accounting of visitor accounts. In the standalone Trapeze

Guest provisioning solution the local database in each controller is used to store user

credentials, limiting the solution to the scope of the local deployment. With the introduction of

amigopod, all visitor accounts are created, authenticated and accounted for on the amigopod

internal RADIUS Server.

Trapeze do offer their SmartPass solution for centralizing Guest Management functions but this

does not address the branding, interactive self registration & extensive reporting functions found

natively in the amigopod solutions.

Trapeze has strong support for the RADIUS extensions defined in RFC3576 which allows

dynamic authorization of wireless users from the configured RADIUS servers. This allows

amigopod administrators to list and disconnect users at will or even deploy automated policies

to disconnect users that exceed some pre-determined traffic profiles.

This deeper integration is detailed in Appendix A.

CONFIDENTIAL 6

Amigopod Configuration

The following configuration procedure assumes that the amigopod software or appliance has

been powered up and a basic IP configuration has been applied through the setup wizard to

allow the administrator to access the Web User Interface. The following table again reviews the

IP Addressing used in the test environment but this would be replaced with the site specific

details of each customer deployment:

MX IP Address 10.9.4.50

Internet Gateway Address 10.9.4.1

amigopod IP Address 10.9.4.8

amigopod RADIUS port Auth 1812 Acc 1813 (default settings)

Please refer to the amigopod Quick Start Guide for more information on the basic configuration

of the amigopod software.

CONFIDENTIAL 7

Step 1 – Create RADIUS NAS for Trapeze Controller

In order for the Trapeze controller to authenticate users it needs to be able to communicate with

the amigopod RADIUS instance. This step configures the amigopod NAS definition for the

Trapeze Controller. The RADIUS key used here needs to be configured exactly the same as

what will be configured on the MXR-2 for the RADIUS transactions to be successful.

For simplicity we will use a shared secret of wireless. Please note this as it will be required in

the first step of the Trapeze configuration.

From the RADIUS Services

Network Access Servers screen click on the Create button to add

a new NAS device. Enter the IP Address of the Trapeze Controller, set the NAS Type as

Trapeze Networks (RFC 3576 Support) and enter the key of wireless in the Shared Secret field.

Click the Create NAS button to commit the change to the RADIUS database.

CONFIDENTIAL 8

Step 2 – Restart RADIUS Services

A restart of the RADIUS Service is required for the new NAS configuration to take effect.

Click the Restart RADIUS Server button shown below and wait a few moments for the process

to complete.

CONFIDENTIAL 9

Step 3 – Create a Web-Login Page

From the RADIUS Services

Web Logins page select the Trapeze Networks Login entry and

Click the Edit button. From the RADIUS Web Login page enter the IP Address of the Trapeze

MXR-2 and select the Skin that you would like presented as the branding for the Captive Portal

page.

Modify the sample HTML in the Header HTML, Footer HTML and Login Message section to

customize for your local environment. Click the Save Changes button to commit the changes.

CONFIDENTIAL 10

Step 4 - Review to Web Login Captive Portal page

Returning to the Web Logins page, select the Trapeze Networks Login entry and Click the Test

button and in a new window the configured captive portal page will be displayed as shown

below:

Click the Back button in the web browser to return to the amigopod configuration screen.

Note: Make note of the URL presented in the web browser after the Test button has been

clicked. This URL will be required in the configuration of the Web Portal settings on the Trapeze

controller. An example of the URL is shown below:

http://10.9.4.8/weblogin.php/6

Altri manuali per PowerConnect W Clearpass 100 Software

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali AMIGOPOD Software

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Manuale utente

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Manuale utente

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Guida rapida alla configurazione

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Manuale utente

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Guida rapida alla configurazione

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Guida rapida alla configurazione

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Guida rapida alla configurazione

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Manuale utente

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Guida rapida alla configurazione

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Guida rapida alla configurazione

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Manuale utente

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Manuale utente

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Manuale utente

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Manuale utente

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Manuale utente

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Guida rapida alla configurazione

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Manuale di istruzioni

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Guida all'installazione

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Guida di riferimento rapido

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Manuale utente

AMIGOPOD

AMIGOPOD PowerConnect W Clearpass 100 Software Guida rapida alla configurazione

Manuali Software popolari di altre marche

COMPRO

COMPRO COMPROFM Manuale utente

Muratec

Muratec OFFICEBRIDGE ONLINE Manuale utente

Oracle

Oracle Contact Center Anywhere 8.1 Manuale utente

Adobe

Adobe 65007312 - Photoshop Lightroom Manuale

Avaya

Avaya NULL One-X for RIM Blackberry Manuale utente

HP ProLiant BL420c Manuale utente

PS Audio

PS Audio PowerPlay Manuale del proprietario

Brady

Brady LOCKOUT PRO 3.0 Manuale di servizio

Avaya

Avaya Interaction Center Manuale utente

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuale

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuale utente

Oracle

Oracle Application 9i Manuale utente

Acer

Acer RDM Manuale utente

Canon

Canon Vixia HF21 Manuale utente

Canon

Canon ZR950 Manuale utente

Samsung

Samsung Auto Backup Manuale utente

Polycom

Polycom Vortex EF2201 Istruzioni per l'installazione e il funzionamento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuale utente