HP ProCurve Networking

» Contact

ProCurve Networking by HP - Application notes



Contents
» 1. Introduction
» 2. Prerequisites
» 3. Network diagram
» 4. Enabling access for wireless guests
» 4.1 Create the Guests group in the Local Radius Server on the WESM
» 4.2 Configure VLAN and DHCP for the Guests group
» 4.3 Create the web-admin account
» 4.4 Create the Guest account
» 4.5 Create the Guest WLAN
» 4.6 Guest logon
» 5. Web page customization

Downloads
» How to configure wireless services for a guest (PDF)

1. Introduction

This document describes how to configure wireless services for a guest.

Scenario: A dedicated WLAN and a guest group are reserved for visitors. The receptionist has access to the Wireless Edge Services Module (WESM) and the rights to create temporary accounts for visitors. A new visitor is on site for one day. An account is created for the visitor, and he connects to the network and gains access to the Internet.

» Return to top

2. Prerequisites

You already have a wireless network and a WESM, managed with PCM+.

» Return to top

3. Network diagram
Figure 1 shows the system configuration. This example uses a ProCurve Switch 5406zl.

To view the power consumption of the phone, issue the following command on the switchFigure 1. System configuration

Using this topology, you will create a Guests group on RADIUS, perform VLAN and DHCP configuration for the group, create a web admin account, then create an account and a WLAN for the guest. You will also test the guest login.

» Return to top

4. Enabling access for wireless guests

This section explains how to enable access.

4.1 Create the Guests group in the Local Radius Server on the WESM

  1. Go to Network Setup > Local Radius Server and choose the Groups tab.
  2. Add a new Group, named Guests. Define it as a Guest Group, and allocate VLAN ID 60. Configure the time parameters as follows:
    Time of access start: 0900
    Time of access end: 1800
    Enable access days from Monday to Friday.
    To view the power consumption of the phone, issue the following command on the switch
  3. Restart the RADIUS server for the changes to take effect.
  4. From the Configuration tab of the Local RADIUS Server, add the Wireless Edge Services Module as a client with the Shared Secret procurve.
To view the power consumption of the phone, issue the following command on the switch

» Return to top

4.2 Configure VLAN and DHCP for the Guests group

  1. On the 5406zl create VLAN 60 and tag it on port FUP:
To view the power consumption of the phone, issue the following command on the switch
  1. Create a new DHCP scope for VLAN 60. (See the Self-Build Guide for details.)
» Return to top

4.3 Create the web-admin account

  1. Go to Management > Web Users.
  2. Add a new user with login name web-admin and password procurve.
  3. For Associated Roles, associate only the role WebUser Administrator. This user will not be able to manage the WESM. He or she will only be allowed to create guest accounts.
    To view the power consumption of the phone, issue the following command on the switch

» Return to top

4.4 Create the Guest account

  1. Log off the WESM by clicking on the Logoff link at the top of the page.
  2. Refresh the screen to obtain the login fields again, and log in as web-admin. You have access to the Guest Registration Page:
To view the power consumption of the phone, issue the following command on the switch
  1. Create a new guest: Either enter the login and password manually, or click Create to automatically generate the login and password. Assign the user to the Guests group.
  2. Configure the access period for 2 days. Leave the start date and time as the default. (That is, starting now).
To view the power consumption of the phone, issue the following command on the switch
  1. Click the View/Delete Guests tab to check that the user has been created.

» Return to top

4.5 Create the Guest WLAN

  1. Log back on as Manager. From the Network Setup > WLAN Setup window create a new WLAN called Guests, with Web Authentication and no encryption.
To view the power consumption of the phone, issue the following command on the switch
  1. Enter the Radius Configuration window and use 10.1.10.5 as the RADIUS Server Address to direct the requests to the Local Radius.
To view the power consumption of the phone, issue the following command on the switch
  1. Enable the new WLAN: From Network Setup > Ethernet > Configuration, configure the interface on VLAN 60.
    To view the power consumption of the phone, issue the following command on the switch

» Return to top

4.6 Guest logon
Test your configuration by logging on as a guest.

  1. From the client PC, connect to the Guests network.
    To view the power consumption of the phone, issue the following command on the switch
  2. Check that you obtain an IP address of 10.1.60.x.
    To view the power consumption of the phone, issue the following command on the switch
  3. Now open a web browser and try to reach an internal address (e.g. 10.1.10.10). You are redirected to the secure Network Login page on the WESM.
    To view the power consumption of the phone, issue the following command on the switch
  4. Enter your username and password. Confirm that you are authenticated.

» Return to top

5. Web page customization
On the Authentication setup page, you can click the Config button if you want to customize the Web authentication page:To view the power consumption of the phone, issue the following command on the switch

The web page will now include the corporate logo:
To view the power consumption of the phone, issue the following command on the switch

This concludes the procedure for enabling a wireless guest. If you have questions, additional information can be found in these sources:

» Return to top