Cisco Systems OL-15986-01 manuale d’uso

Americas Hea dquarters Cisc o Syst ems , Inc . 170 West Ta sman Driv e San Jos e, CA 95 134-1706 USA http://www.ci sco.com Tel: 408 526-4000 800 553- NETS (638 7) Fax: 408 527-0883 Cisco NA C Guest S er v er Installation and Configuration Guide R ele ase 1 .1 .0 Marc h 20 08 Text Pa rt Numbe r: OL -15986-0 1[...]

THE SPECIFICATIONS AND INFORMATION REG ARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOU T NOTICE. ALL STATEMENT S, INFORMATI ON, AND RE COMMENDATIONS IN T HIS MANUAL ARE BELI EVED TO BE A CCURATE BUT ARE P RESENTED WI THO UT WARRANTY OF ANY KIND, EXPRE SS OR IMPLIED. USERS MUST TAKE FULL RESPON SIBILITY FOR THEIR AP PLICATION OF ANY [...]

iii Cisco NAC Guest Server I nstallat ion and Configur ation Gui d e OL-15986-01 CONTENTS About Th is Gui de ix CHAPTER 1 Welcome to Cisco NAC Guest Serve r 1-1 Intro ducti on 1-1 Guest Acce ss Conc epts 1-1 Before You Start 1-2 Pack age Cont ents 1-2 Rack M ounti ng 1-3 Cisco NA C Gu est Ser ver Licens ing 1-3 Upgradi ng Fir mware 1-3 Additi onal [...]

Cont ents iv Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Edit Exi stin g Admi n Acc oun t 3-11 Delete Existin g Admin Accoun t 3-13 CHAPTER 4 Configur ing S ponsor Authenti cation 4-1 Config uring Local Spon sor Authentica tion 4-1 Add New Local User Account 4-1 Edit Exis ting Us er Account 4-3 Delete Existin g User Acc [...]

Content s v Cisco NAC Guest Server I nstallat ion and Configur ation Gui d e OL-15986-01 CHAPTER 7 Integra ting with Cis co NAC Appliance 7-1 Adding Cl ean Acc ess Manager En tri es 7-1 Editi ng Clean Acc ess Manag er Entri es 7- 3 Delet ing Clea n Ac ces s Man age r Entr ies 7-4 Config uring the CAM for Repo rtin g 7-4 Adding a RADI US Account ing[...]

Cont ents vi Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 CHAPTER 12 Replicat ion and Hig h Availa bil ity 12-1 Setti ng up rep licati on 12-1 Config uring Provisi onin g 12-3 Replic ation Status 12- 4 Recover i ng from Fa ilur es 12-4 Network Co nnectivity 12- 4 Device Fa ilure 12-5 Deployme nt Co nsidera t ions 12- 5 Co[...]

Content s vii Cisco NAC Guest Server I nstallat ion and Configur ation Gui d e OL-15986-01 Printi ng/E mail/ SMS Multip le Ac coun ts 15-9 Viewin g Mu ltiple Account Groups 15-10 Viewin g Mu ltiple Account Groups 15-10 Findin g Mu ltiple Acco unt Group s by use rname 15-11 Findin g Mult iple Acc ount G roups on the Act ive Acc ounts Repo rt. 15-11 [...]

Cont ents viii Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01[...]

ix Cisco NAC Guest Server I nstallat ion and Configur ation Gui d e OL-15986-01 About This Guide March 5, 2008, OL-15986-01 This pre face inc ludes the follo wing s ections: • Audien ce • Purpose • Document Con venti ons • Product Docume ntation • Obtaining Doc umentation and Submitt ing a Service Request Audience This guid e is for netwo[...]

x Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 About Thi s Guide Product Docume ntation Ta b l e 1 lists docume nts are a vaila ble for C isco N A C Guest Serv er on Cisco. com at the fo llo wing URL: http://www .cisco.com/en/US/products/ps61 28/tsd_ pro ducts_sup port_series _home .html Ti p T o access e xternal URLs r e[...]

CH A P T E R 1-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 1 Welcome to Cisco NAC Guest Server Introduction The Cisco N A C Guest Server is a compl ete provisionin g and reporting system that pro vides temporary network acce ss for guests, visit ors, co ntracto rs, consulta nts or cust omers. The Guest Server works a[...]

1-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 1 Welcome t o Cisco NAC Guest Ser ver Before You Start Sponsor The Sponsor i s the person w ho cre ate s th e guest u ser ac co unt. Th is pe r son is oft en a n em ployee o f the organization t hat provides the net work access. Sponsors can be specific individuals[...]

1-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 W el com e to Cisco NA C Guest Serv er Befor e Yo u Star t Figur e 1 -1 Shipping Bo x Contents Note Be cause prod uc t sof tware is p re loaded on to t he Cisco NA C G ues t Server appl ia nce, the sh ipping contents do not includ e a separate software install a[...]

1-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 1 Welcome t o Cisco NAC Guest Ser ver Before You Start Additional Information For late-breaking or additional deta ils for this release, refer to the Release Note s for Cisco NA C Guest Server , Rele ase 1.0.0 . For the latest online updates to this guide, v isit h[...]

CH A P T E R 2-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 2 Installing Cisco NAC Guest Se rver This chap ter cont ains the follow ing sections: • Connec ting the C isco N A C Guest Serv er • Comm and Li ne Conf igur ation • Re-Imaging the Ap pliance Connecting the Cisco NAC Guest Se rver The Ci sco NA C Guest [...]

2-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 2 Installing Cisco NAC Guest Server Connecti ng t he Cisco NA C Gues t Server Figur e 2-1 Cisco NA C Guest Serv er F ro nt P anel Figur e 2-2 Cisco NA C Guest Serve r Rear P anel 1 2 3 4 6 5 7 8 9 8 180955 1 Hard disk dri ve (HDD) bay 6 HDD acti vity LED indic ator [...]

2-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 2 Insta lling Cisco NAC Gue st Server Command Line Configuration Note The three LAN ports each ha ve their o wn LED indicator s for acti v ity/link status and netw ork speed. Command Line Configuration A ver y mini mal amount of comm and line con f igurat ion is n[...]

2-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 2 Installing Cisco NAC Guest Server Command Line Configura tion Figur e 2-4 Choose eth0 Int e rface Step 3 Select th e eth0 interf ace fr om the list using the up a nd do wn arro w ke ys and press <Enter> . Step 4 Y ou can no w enter all t he correct netwo rk [...]

2-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 2 Insta lling Cisco NAC Gue st Server Command Line Configuration Figur e 2-6 Quit the Utility Step 6 At the command line either reb oot the applian ce by typi ng rebo ot and pressi ng <Enter> or fol lo w the instructions to Change Root Password, page 2-5 bef[...]

2-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 2 Installing Cisco NAC Guest Server Re-Ima gin g the Ap pl iance Re-Imagi ng the Ap pliance When th e Cis co N A C Gue st Se rver is sh ipped, the system image already prelo aded on the unit, so imaging is u nnecessa ry . If you n eed to re -image t he appli ance to[...]

2-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 2 Insta lling Cisco NAC Gue st Server Re- I magi ng t he A p plia nce Note If you pre ss <Enter> b y mistak e on a se rial conn ection, the imaging process will still ru n, b ut there is no display until the appliance reboots at th e end of the process. Step[...]

2-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 2 Installing Cisco NAC Guest Server Re-Ima gin g the Ap pl iance Step 9 The applian ce boots and run s the f inal setup of the ima ge automati cally . T he imaging process is co mplete when the logi n screen displa ys ( Figure 2- 10 ). Figur e 2-1 0 Imaging Com plet[...]

CH A P T E R 3-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 3 System Setup The s ystem c an be configured through the web in terface t o provide the n etworking configur ation for th e appli ance and othe r syst em se tting s th at are i mport ant such as time and S SL cer tificate. The C isco NA C Guest Serv er is ad[...]

3-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Access ing the A dministr ation Int erf ace Obtain and Insta ll Cisco NAC Guest Serve r License Use the follo wing step s to obtain and instal l your Fle xLM pr oduct lice nse fi les for Cisco N AC G uest Server . Step 1 W ith FlexLM lic ensing, you[...]

3-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup Accessing the Administration Interface Figur e 3-1 Guest Serv er License F orm (exampl e) Step 7 Click Submit to install the lice nse. Access Cisco NAC Gues t Server Ad ministratio n Interface Step 8 The Ci sc o NA C G u est Ser ver A dm i nis tra t[...]

3-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Con fi gur ing Ne t wor k Se tt ing s Step 10 After the license is installe d, the administrator inter face is brought up in web browser as follo ws: • For HTTP access, ope n http://<guest_server_ip_addr ess>/admin • For HTTPS access, open[...]

3-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup Date an d Time Setti ngs Figur e 3-4 Netw o r k Sett ings Y o u can ch ange the fol lowing Network Settin gs: • Domain Name—E nter th e domain name for your organization (e.g . cisc o.com) • Hostname—Ente r the name of the appliance as de fi[...]

3-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Date and Time Settings Figur e 3-5 D at e/Time Set tings Step 2 Select th e cor rect Date and Tim e for the location of the Guest Ser ver . Step 3 Click the Set System Date and T ime button to appl y the time and date. Step 4 Select th e cor rect Ti[...]

3-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup SSL Certificate SSL Certificate Both spons ors and administ rators can access t he Cisco NA C Guest Server usi ng either HTTP or HTTPS. For more sec ure access Cisco reco mmends using HTTPS acc ess. This section de scribes the following • Accessin[...]

3-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup SSL Certificate Note Th e Main SSL Se ttings pa ge also provides the R est art W eb S erver button. Y ou ne ed to re start the W eb Serv er comp onent of th e applian ce when ne w certif icates ar e genera ted or upl oaded to the applianc e. Clic ki[...]

3-9 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup SSL Certificate Step 4 T o use the ne w temporary certif icate you must restart the web server proc ess. Click the Main tab from the top of the scre en, then click the Restart W eb Server butto n ( Figure 3- 6 ). Note If yo u want the CSR, you ca n [...]

3-10 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Conf igurin g Admi nistrat or A uth enti cat ion Upload Certificate Files The Cisco N AC Guest Ser ver provides a meth od of importing/uploa ding certif icate f iles to the appliance. The Upload SSL Certif icate pages is used to in stal l a CA- sig[...]

3-11 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup Confi guring Administr ator Auth enticat ion Figur e 3- 1 0 Adm in Acc oun ts Step 2 In the Adm in A cc ounts page ( Figure 3-10 ), click the Add User button. Figur e 3-1 1 A dd A dmin User Step 3 In the Add A dmi nist rato r pa ge ( Fig ure 3- 11 [...]

3-12 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Conf igurin g Admi nistrat or A uth enti cat ion Step 1 From the a dministration interf ace select A u thenti cation > Adm inistr ators from the le ft hand me nu. Figur e 3-12 A dmin Us ers t o Edit Step 2 In the Adm in A cc ounts page ( Figure [...]

3-13 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 3 System Setup Confi guring Administr ator Auth enticat ion • If succ essful ly ch an ged, a succ ess me ssage d isplay s a t th e top o f th e pa ge a nd yo u c an m a ke additi onal cha nge s to the sam e admi n acc oun t. Delete Existin g Admin Ac count Y o [...]

3-14 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 3 Syste m S etup Conf igurin g Admi nistrat or A uth enti cat ion[...]

CH A P T E R 4-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 4 Configuring Sponsor Authentication Sponsor s are the pe ople who use Cisco N A C Guest Server to create gues t accoun ts. Spon sor authenti cation is the method used to authentic ate spon sor users on the Guest Serv er . There are fou r options a vailable: [...]

4-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Loc al Spons or Aut henticat ion Figur e 4- 1 Local Users Step 2 Click the Add User butt on to bring u p the local sponso r configurat ion page ( Figure 4-2 ). Figur e 4- 2 Add Local User Step 3 In the Add a Lo cal U[...]

4-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Config uring Lo cal Sponso r Authenticat ion • If successfu lly ad ded, a su cces s messag e display s at the top of t he page and you c an ad d additi ona l user accoun ts. Edit Existing User Acco unt Y o u can mod ify [...]

4-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Loc al Spons or Aut henticat ion Note Leaving the Password and Repe at Password fields empt y keeps the existing passwo rd. • Password—Change the p assword fo r the spo nsor accou nt. • Repeat Password— Retyp[...]

4-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Configuring Active Directory (AD) Authenticat ion Configuring Active Directory (AD) Auth entication Active Directory Aut hentica tion au thentic ates spon sor users to the G uest Server using t heir existi ng AD user ac co[...]

4-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Ac ti ve Directory (AD) Aut henticat ion Add Active Directory Domain Controller Step 1 From the admin istration inter face se lect A uthentica tion > Sponsors > A ctiv e Directo ry Serv ers from the menu. ( Fig[...]

4-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Configuring Active Directory (AD) Authenticat ion • Base DN—T ype the Base Distinguished Name (DN ) of the domain controller . This is the name of the ro ot of the di rect ory tree. It is used so that w hen gr oup sear[...]

4-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Ac ti ve Directory (AD) Aut henticat ion Figur e 4- 9 Edi t DC Se ttings Step 4 Modify sett ings as ne eded : • User Ac count Suffix—Edit the User Accoun t Suff ix and incl ude the leading @, for example: @cca.c [...]

4-9 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Confi guring L D AP Authent ication Delete Existing Domain Controller Entry Step 1 From the administrat ion interf ace, selec t A uthenti catio n > Sponsor > Acti ve Dir ectory Serv ers from the menu. Step 2 Select t[...]

4-10 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing LDAP Authe ntica ti on • Base DN —This is the Dis tinguis hed Name of the cont aine r object wher e an LD AP search to f ind the user begins, su ch as O U=E ngin eerin g,O =Cisc o. • User Searc h Filter— The[...]

4-11 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Confi guring L D AP Authent ication Add an LDAP Server Step 1 From the a dministration interf ace select Authentica tion > Spo nsor s > LDAP Servers from t he m enu ( Figure 4-11 ). Figur e 4-1 1 LDAP A uthentica ti[...]

4-12 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing LDAP Authe ntica ti on • LD AP Server Name— T yp e a text descri ption of the LD A P Server Name . For example: Cisco LDAP - ldap .cisco .com . • LD AP Server URL—Enter the URL for accessing th e LD AP serve[...]

4-13 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Confi guring L D AP Authent ication Figur e 4- 13 Sel ect L DAP Server to Ed it Step 3 In the L D AP Server pa ge ( Figure 4-14 ), edit the details f or authen ticating agains t this LD AP serv er . Figur e 4-14 Edit LD A[...]

4-14 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing LDAP Authe ntica ti on • User Searc h Filter— The User Search Filter de f ines ho w user entrie s are named in the LD AP serve r . For example you c a n define t hem to be uid (u id= %USE RNAME%) or c n (cn= %US[...]

4-15 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Configuring RADIUS Authentication Figur e 4-15 Delet e LD AP Serv er entr ies Step 3 Click the Delete L D AP bu t t o n . Step 4 Confirm dele tion of the L D AP Ser ver at the p rompt . If th ere ar e an y errors, the L D[...]

4-16 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing RADIUS A ut henticat io n Add a RADIUS Server Step 1 From the administrat ion interf ace sel ect A uthentica tion > Sponsors > RADIUS Servers from the menu ( Figure 4-16 ). Figur e 4-16 RADIUS A uthentication [...]

4-17 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Configuring RADIUS Authentication Edit an Exis ting RADIUS Serv er Step 1 From the a dministration interf ace select Aut hentication > Sponsor > Radius Servers from the men u. Step 2 Select the RADIUS serv er from t[...]

4-18 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Spon sor Authe nticati on Set tings Step 5 Click the Save S e t t i n g s button. Delete an Existing RADIUS Server Entry Step 1 From the a dministration interf ace select Aut hentication > Sponsor > Radius Ser[...]

4-19 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 4 Conf igu ri ng Sponsor A uthenticat ion Confi guring Sponsor Auth enticat ion Settings Figur e 4-21 A uthentication Order . The f irst serv er to be authentic ated ag ainst is at the to p of t he list an d the la st at the bottom. Step 2 Select the serv er that[...]

4-20 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 4 Configuring Sponsor Authentication Configur ing Spon sor Authe nticati on Set tings[...]

CH A P T E R 5-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 5 Configuring User Group Permissions User g rou ps are the met hod by whi ch to a ssign pe rmis sions to the s pons ors. Y ou c an set r ol e-ba sed permi ssion s for spon sors t o allo w or res trict acc ess to di ff erent fu nction s, such as cr eating acco[...]

5-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 5 Configuring User Gr oup Perm issions Adding User Groups Figur e 5-1 User Gr oups Step 2 Click the Add Group but ton to add a ne w user gr oup. Step 3 From the Add a Ne w User Gr oup page ( Figure 5-2 ), ente r the name for a new user group. Figur e 5-2 A dd New Us[...]

5-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 5 Conf igu ri ng User Gro up Permiss ion s Adding User Gro ups • Allo w Login—Select Ye s to allo w sponsors in th is group to access the Cisco N AC G u est Serv er . Othe rwise, sele ct No . • Create A ccount—Select Ye s to allow sponsors to create gu est[...]

5-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 5 Configuring User Gr oup Perm issions Editin g Us er Gro ups – T emplate Options—Y ou can specify a list of preset durations that the sponsor ca n use when creati ng acc ount s, such as 1 h our, 1 day , or 3 da ys. I f thi s is sel ect ed th e tem pla te opti o[...]

5-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 5 Conf igu ri ng User Gro up Permiss ion s Editi ng User Gro ups Figur e 5-5 Edit User Gr oup Step 4 Edit Perm issions fo r the User Gro up as follo ws: • Allo w Login—Select Ye s to allo w sponsors in th is group to access the Cisco N AC G u est Serv er . Oth[...]

5-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 5 Configuring User Gr oup Perm issions Deleting User Grou ps • Active Accounts—Cho ose o ne of the foll owing permi ssions for viewing repor ting details f or a ctiv e accoun ts – No—Spon sor s are n ot a ll owed to vi ew repor ting d eta il s on any ac coun[...]

5-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 5 Conf igu ri ng User Gro up Permiss ion s Speci fying the Or der of User Groups Figur e 5-6 List Gr oups to Dele te Step 2 Select the group you wish to delete and clic k the Delete Gr oup but t o n ( Figure 5-6 ). Step 3 Confirm deleti on at the pr ompt. Note If [...]

5-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 5 Configuring User Gr oup Perm issions Mapping to Active D ire ctory Gro ups Mapping to Active Directo ry Groups If a sponsor authen ticates to the Cisco N A C Guest Server using Acti v e Directory authe ntication then the Cisco N A C Gues t Serve r can map them int[...]

5-9 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 5 Conf igu ri ng User Gro up Permiss ion s Mapping to LDAP Gro ups 1. Storing the group membership in an attri bute of the user objec t. W ith this meth o d the u ser object has one or more attrib ute s that list the grou ps that the user is a member of. If your L[...]

5-10 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 5 Configuring User Gr oup Perm issions Mapp ing to RADIUS Gr oups Mapping to RADIUS Groups If a sponso r authenti cates to the Cisco N A C Guest Ser ver using RADIUS authenticati o n then the Cisco N AC Gue st Serv er can map th em into a user g roup by u sing info[...]

CH A P T E R 6-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 6 Configuring Guest Policies Org anizations co mmonly ha ve poli cies in pla ce for creatin g accou nts for the ir intern al users and systems, su ch a s the forma t or l engt h of the u ser name a nd/ or compl exity o f pa ssword. Th e Ci sco NA C Guest Se r[...]

6-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 6 Co nfig urin g Gue st Po lic ies Settin g th e Pas swo r d Pol ic y Step 2 Choose one of three opt ions for cr eatin g the user na me for the guest acc ount. • Userna me Po licy 1 (email) Use the gue st’ s email ad dress as the userna me. If an ov erlap ping [...]

6-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 6 Conf igu ri ng G uest Policie s Setting the Guest Details Policy Figur e 6-2 P asswor d P olicy Step 2 In the Alphabetic Characters sec tion, e nter the ch aracter s to us e in the password a nd the a mount to includ e. Step 3 In th e Numer ic Charac ters sectio[...]

6-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 6 Co nfig urin g Gue st Po lic ies Settin g th e Gues t Det a ils Poli c y Figur e 6-3 Guest Deta ils P olicy Step 2 Y ou can sp ecify one o f thre e settin gs f or each requirement: • Required—I f a field is set to requ ired it is di splayed on t he create gue[...]

CH A P T E R 7-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 7 Integrating with Cisco NAC Appliance This chapte r describes the follo wing: • Adding Cle an A cce ss Mana ger En tri es • Editing Clean Acc ess Manager Entries • Deleting C lean A ccess Manage r Entries • Conf iguring the CAM for Reporting Guest us[...]

7-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 7 Integrating with Cisco NAC Appliance Adding Clean Acces s Mana ger E ntries Step 1 From the Gue st Serv er administ ration int erfac e, sele ct De v ices > NA C Applia nce from the left ha nd menu ( Fig ure 7- 1 ). Figur e 7 -1 Cisco NA C Appliances Step 2 Clic[...]

7-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 7 Integr ating with Cis co NA C Applia nce Editing Clean Access Manag er Entri es Step 6 In the Clean A c cess Ma na ger adm in conso le, navigate to Monitoring > Event Log s and v erify th at the accou nt nacg uest_tes t w as su ccessfu lly cre ated and th en [...]

7-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 7 Integrating with Cisco NAC Appliance Deleting Clea n Acces s M anager E ntrie s • Hostname of Address—T ype the DNS name or IP addre ss for the CAM. • Admin Username— Enter an admin userna me which has API permi ssion to the CAM . • Password—T ype the [...]

7-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 7 Integr ating with Cis co NA C Applia nce Config uring t he CAM for Repo rting Note For detailed instruct ions on ho w to access and conf igure settings on the CAM, refer to the applicable Cisco NA C A pplian ce - Clean A ccess Man ager In stall ation and Configu[...]

7-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 7 Integrating with Cisco NAC Appliance Con fi gur ing the C AM fo r Rep o r ti n g Configure the CAM to Form at RADIUS Accounting Da ta The CAM can be conf igured to place ma ny dif fer ent attrib ut es into the RADIU S account ing pa ckets an d the at tri butes th [...]

7-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 7 Integr ating with Cis co NA C Applia nce Config uring t he CAM for Repo rting Figur e 7 -8 Edit User Name At tr ibute Step 3 In the Edit User_ Name attrib ute page ( Figure 7-8 ), click the Reset Element bu tton to remo ve the exist ing sa mple da ta f orm at . [...]

7-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 7 Integrating with Cisco NAC Appliance Con fi gur ing the C AM fo r Rep o r ti n g Figur e 7 -1 0 A dd Calling Station Id At tr ibute Step 9 In the Ne w Shared Events attr ibu te form ( Figure 7-10 ), select Calling_Station_Id from the Se nd RADIUS A tt ributes dr o[...]

CH A P T E R 8-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 8 Configuring RADIUS Clients This chapte r describes the follo wing • Ove rvie w • Adding RA DIU S Clients • Editing RADIUS Clients • Deleting RA DIUS Clients Overview Remote Aut h enticatio n Dial In User Serv ice (RADI US) is an AAA (auth enticati o[...]

8-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 8 Configuring RADIUS Clients Addin g RADI US Cl ie nt s Note Any time you make a change to a RADIUS component on th e Cisco N A C Guest Server , you will need to Restar t the RADIUS ser vice for the ch anges to be come acti ve. Adding RADIUS Clients Step 1 From the [...]

8-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 8 Conf igu ring RADIU S Clients Editing RADIUS Clients Step 5 T ype a shared Secr et for the R ADIUS c lient. This must match t h e shared secret specif ied in t he configurati on of t he RA DIU S c lient . Step 6 Retype th e shared secr et in the Conf irm Secr et[...]

8-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 8 Configuring RADIUS Clients Delet in g RADI US Client s Figur e 8-4 Edit RADIUS Client Step 3 In the Edit Radius Client page ( Figure 8-4 ), edit the IP Address of th e RADIUS client. Step 4 Edit th e sh ared sec ret us ed be tween the clie nt an d the Cisco N AC G[...]

8-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 8 Conf igu ring RADIU S Clients Deleting RADIUS Clients Figur e 8-5 List RADIUS Cl ients Step 2 In th e Radi us Cli ents page ( Figure 8-5 ) , select the RADIUS client from the list. Step 3 Click the Delete Ra dius bu tton and c onfir m the action. Step 4 From the[...]

8-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 8 Configuring RADIUS Clients Delet in g RADI US Client s[...]

CH A P T E R 9-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 9 Guest Account Notification When a guest accoun t is created, the detai ls of the ac count need to be passed fr om the sponso r to the guest. Th e Cisco NA C Guest Ser ver provides a num ber of ways to do this : • Manually reading th e detai ls to th e gue[...]

9-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 9 Guest Account Notification Configur ing Email Notifi ca tion Configuring Email Notification The follo wing steps describe ho w to conf igure email setti ngs for the Cisco N A C Guest Server to correctl y deliv er guest account details via email. Step 1 From the a [...]

9-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 9 Gue st Accou nt Notif ica tion Configuring SMS Notification Configuring SMS Notification Short Messa ge Service (SMS) is delivered through a n SMS gateway service that s upports SMT P (Simple Mail Transport Protoc ol) delivery . Y o u need to have an internal SM[...]

9-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 9 Guest Account Notification Con fi gur in g SMS Noti ficat ion[...]

CH A P T E R 10-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 10 Customizing the Application This chapte r describes the follo wing • User Interf ace T emplates • Adding a User Interf ace T emplate • Editing a User In terface T emplate • Deleting a T emplate • Setting the Def ault Interface Mappin g • Setti[...]

10-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 10 Customizing the Application Adding a Us er Inte rface T emplat e Adding a User Interfac e Template When you add a ne w template, it is automatically based on the default temp late to facilit ate editing. Step 1 From the a dministration interf ace select U ser I [...]

10-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 0 Customizi ng the App li cat io n Editing a U ser In terfac e Templ ate Step 1 From the a dministration interf ace select U ser I nterf ace > T e mpla tes from the l eft hand menu . Figur e 1 0-3 User Int erfac e T emplat es Step 2 From the Curren t T empla[...]

10-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 10 Customizing the Application Editing a U ser Interf ace Templat e Editing the Print Template The Prin t T emplate pa ge contai ns the guest account de tails that the sponso r can bring up in a browser to print ou t for hand ing to t he gu est afte r t he acc oun [...]

10-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 0 Customizi ng the App li cat io n Editing a U ser In terfac e Templ ate Step 6 Click the Save T em p l a t e button t o save your c hang es. Editing the Email Template The Email T emplate pa ge co ntains the gu est ac count detai ls tha t the spo nsor c an e m[...]

10-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 10 Customizing the Application Editing a U ser Interf ace Templat e Step 7 Click the Save T em p l a t e button t o save your c hang es. Editing the SMS Template The SMS T emplate p age contains the guest acc ount de tails th at the spons or ca n text me ssage to t[...]

10-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 0 Customizi ng the App li cat io n Editing a U ser In terfac e Templ ate Step 5 The SMS Bod y contains be the SMS text to be sent to the guest. In the SMS Body you ca n use the follo wing sp ecial v ariables to re place them w ith the detai ls from the cr eated[...]

10-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 10 Customizing the Application Deleting a Template Figur e 1 0-9 Add A ccount Duratio n Step 4 Enter a d escrip tion that yo u want to appear in the sponsor in terfa ce, such as “1 Hour . ” Step 5 Select the desi red dur ation f rom the dro p d own menu. Step 6[...]

10-9 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 0 Customizi ng the App li cat io n Setting User Default Redirection Figur e 1 0-1 0 Def ault User Int erf ace Mapp ing Step 2 Select th e T emplat e from the dropdo wn list. This will becom e the template u sed for th e sponsor and gu est user in terf ace. Step[...]

10-10 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 10 Customizing the Application Setting User D efault Red ire ct ion[...]

CH A P T E R 11-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 11 Backup and Re store Y o u should bac kup the C isco NA C G uest Server on a regu lar basi s so that in the event of a har dware failure you do not loose c ritical data. T he Cisco N AC Guest Server bac kup proc ess back s up the system setup, ac co unt da[...]

11-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 11 Backup a nd Restore Configur ing Backu p Settings Configuring Backup Settings Step 1 From th e ad minist rat ion hom e pa ge se le ct Serv er > Ba ckup from the l eft hand menu ( Figure 11-1 ). Figur e 1 1 -1 Bac kup Set tings Taking a s napsh ot Y o u have [...]

11-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 1 Back up an d Restore Restor ing Back ups Schedulin g a Back up Y o u can s chedu le back ups to occur every day , week, o r month at 1:00 AM . Schedu led back ups a re stor ed in either the / guest/back ups directo ry of the Cisco NA C Guest Server or on a re[...]

11-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 11 Backup a nd Restore Restoring B ackups Note Y ou ca n on ly rest ore a b acku p t o the sa me versio n of Cisc o N A C Guest Se rver software with w hi ch the backup was taken. If you want need to determi ne which version wa s used to perform t he backup , open[...]

CH A P T E R 12-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 12 Replication and High Availab ility T o provi de high a vailability , the Cisco N A C Guest Serve r solution c an be con figured so that a pair of units synchr onize th eir databa ses betw een one an other . This provides the a bility fo r the soluti on to[...]

12-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 12 Replication and High Availability Sett ing up repl icati on Step 1 Create a ba ckup of the Cisco NA C Guest Server befor e start ing by following the T a king a snapsh ot instructions in Configuring Backup Se ttings, pa ge 11-2 . Step 2 From the administration i[...]

12-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 2 Replicat ion and Hi gh Availab ility Configuring Provisioning Configuring Provisi oning When th e Ci sco N A C Guest Se rver pr ovi sions accou nts in ot her systems , such as th e Cl ean Acc ess Manager, only o ne of the Guest Ser vers sh ould be p er fo rmi[...]

12-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 12 Replication and High Availability Repl icati on St atus Replication Stat us At an y moment in t ime yo u can check the replic ation status of the C isco N A C Guest Ser ver s. Th is is useful to mak e sure replicatio n is happening as you want it to. Step 1 From[...]

12-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 2 Replicat ion and Hi gh Availab ility Deploym ent Consi derati ons Device Failure If one of the C isco N A C G uest Servers in a repli cation pair fails and needs t o be replaced, you should set up repli cat ion wi th t he wo rkin g ser ver a nd t he da ta wi [...]

12-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 12 Replication and High Availability Deploym en t Consider ations Dependi ng on the amo unt of activity that your Ci sco NA C Guest Ser ver perfo rms yo u need to make sur e that the re is enough bandw idth betw een the server to enab le synchr onizatio n to occu r[...]

12-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 2 Replicat ion and Hi gh Availab ility Deploym ent Consi derati ons[...]

12-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 12 Replication and High Availability Deploym en t Consider ations[...]

CH A P T E R 13-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 13 Logging and Troubleshooting This chapte r describes the follo wing: • System Logging • Log Files System Logging All ac tions within the C isco NA C Guest Server a re logg ed int o the data base. T his en able s you t o see a ny action t hat occurr ed [...]

13-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapte r 13 Logging a nd Troubl eshoot ing Log Files Log Files The system r ecords inf ormation in dif ferent log f iles depending on the app lication fun ction: • Do wnloadin g the log file s • Applic ation Lo gging • Email Loggin g • RADIUS Log ging • CAM Upda [...]

13-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 3 Logg ing and Troub le shoot ing Log Files CAM Upda te L ogg ing The ac c oun ts on th e C is co NA C Appl ia nce Cl ean Acc ess M ana ge r ar e cr eat ed by a p roce ss th at runs e v ery minute on the Cis co NA C Gue st Server . T o troubl esho ot issues, yo[...]

13-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapte r 13 Logging a nd Troubl eshoot ing Log Files[...]

CH A P T E R 14-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 14 Licensing The Cisco N A C Guest is licensed via a f ile associated with the MA C address of the applia nce. The f ile can be obtai ned from cisco.c om and inst ructions a re include d in the lice nsing pac k. The Cisc o N AC Guest Ser ver o nly supports o[...]

14-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapter 14 Licensing Licensin g[...]

CH A P T E R 15-1 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 15 Sponsor Documentation This cha pter provides exam ple user doc ument ation for spon sor users w ho creat e guest acc ounts. It conta ins t he f oll owing sect ions: • Introduction to Cisco N AC Guest Server • Connecting to the Gu est Serv er • Creat[...]

15-2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Connecti ng t o the Gu es t Server Figur e 15-1 A uthentication Screen Step 2 In the Cisco Gue st Server login page , enter you r Usern ame a nd Password and click the Login button ( Figure 15 -1 ). Use the login cr edentia ls specif[...]

15-3 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Connecting t o the Guest Server Step 4 In the defa ult settings you can customize the settings for the follo wing: • Langua ge T em pla te—If y our adm in istra tor has a dded ad dit iona l t empla tes, y ou ca n sele ct the one t[...]

15-4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Creating Guest Us er A ccoun ts Creating Guest User Acc ounts If you are assi gne d the appro pria te perm issions, you can cr eate tem porar y guest user accou nts. Step 1 From the Main page , eit her clic k Create a Guest User Acco[...]

15-5 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Creating Guest User Accounts Figur e 15-5 Guest Use r Cr eated Step 12 Dep ending on you r permissio ns, you can per form one or a ll of the following act ions on the same page where th e ne w accoun t details ar e displa yed: • Pri[...]

15-6 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Creating Guest Us er A ccoun ts Print Account Details Step 1 Click the Print Account b utton. Figur e 15-6 Pr int Ac count Details A new Printer wi ndow opens a nd you c an p rint o ut th e gue st u ser det ails. Email Account Detail[...]

15-7 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Multiple Guest Accounts Multiple Guest Accou nts The Cisco N AC Gue st Serve r allo ws you to create multip le accounts at the same time. Y ou can create multiple ac co unts b y pasti ng the detail s into th e inter f ac e, impor ting[...]

15-8 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Mult iple G uest Ac cou nts Step 3 Enter th e detail s in the te xt field as requ ested with a comma se parating th e v alues. Step 4 Select th e Acc ount Sta rt t ime, Account End time, and T imezone for the accoun t. Step 5 Click t[...]

15-9 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Multiple Guest Accounts Figur e 15-1 0 Cr eat e Ran dom A ccounts Step 3 Enter the amo unt of ac coun t s tha t yo u want to g en erat e. Step 4 Specify the Account Start time, Account End ti me, and Tim ez on e . Step 5 Click the Sub[...]

15-10 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Mult iple G uest Ac cou nts Figur e 15-12 Pr int for random a c count cr eation When crea ting acco unts with preset d etails (b y either importin g te xt or cr eating a CSV f ile), you can print, email, or transmit via SMS the gues[...]

15-11 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Multiple Guest Accounts Figur e 15-13 Multiple A ccount Gr oups Step 3 Click the Edi t butto n to edi t the b ulk a ccounts. Finding Multiple Account G roups by username This op tio n a l lows you to find t he b atc h o f acc oun ts [...]

15-12 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Editin g Gu est Acco unts Editing Guest Accounts If yo u cr ea te an ac co unt f or a gu es t an d you ne e d to exten d t hei r acc oun t a cce ss, you can c hange the expiry date an d time of the ac count. Step 1 From the M ain pa[...]

15-13 Cisco NAC Guest Server Installation an d Configur ation Guide OL-15986-01 Chapter 1 5 Sponsor D ocument at ion Viewing Active Accounts and Resending Details Figur e 15-17 Suspend A ccounts Step 2 In the Su s p en d User Acc ounts page ( Figure 15-17 ), yo u can view a list of the ac coun ts that you are abl e to suspend. Step 3 Click the Susp[...]

15-14 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Chapt er 15 Spon s or Do cum entat i on Reportin g on G uest Users Figur e 15-19 Full Repor ting Step 2 The Ci sco NA C Guest Ser ver Repo rt ing page ( Figure 15-19 ) initially display s the co mplete r eport for your use r per mission s. T o shorten or filter the re por[...]

A- 1 Cisco NAC Guest Server I nstallati on and Configur ation Gui d e OL-15986-01 APPENDIX A Open Source License Acknowledgements Notices The fol lo wing notices p ertain to this soft ware l icense. OpenSSL/Op en SSL Proje ct This pr odu ct in clu des soft ware developed by the Op enSSL Proj ect for u se in t he Op en SSL T oolkit ( http://www .ope[...]

A- 2 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Appendix A Open Sou rce License Acknowledg ements Notice s 5. Product s deriv ed from thi s software may no t be called “O penSSL” nor may “OpenSSL ” appear in their n ames with out prior wr itte n per mission of the Op en SSL Proj ec t. 6. Redistributions of a ny [...]

A-3 Cisco NAC Guest Server I nstallat ion and Configur ation Gui d e OL-15986-01 Append ix A Open Source License A cknow l edge men ts Notices THIS SOFT W ARE IS PR O VIDED BY ERIC YO UNG “ AS IS” AND ANY EXPRESS OR IMPLIED W ARRANTIE S, INCLUDI NG, BUT NO T LIMIT ED TO, THE IMPLIED W ARRA NTIES OF MERCHANT ABILITY AND FIT NESS FOR A P AR TICUL[...]

A- 4 Cisco NAC Guest Server Installation and Configuration Guide OL-15986-01 Appendix A Open Sou rce License Acknowledg ements Notice s[...]