That makes sense. We are not running a guest server and from the description before, I thought this was being accomplished without one. Thanks for the info.
Thanks, Jeremy L. Shoemaker Systems Administrator Dakota Wesleyan University 605-995-2147 [email protected] Strategic - WOO - Maximizer - Achiever - Learner -----Original Message----- From: Cisco Clean Access Users and Administrators [mailto:[email protected]] On Behalf Of Beausoleil, Brian Sent: Wednesday, October 20, 2010 7:41 AM To: [email protected] Subject: Re: Guest Wireless We use the Cisco NAC appliance over wireless, but have different authentication realms for guest and domain users (which include students). The guest realm is basically a local account to Cisco NAC and the guest accounts are created and managed by the Cisco NAC Guest Server. You map an AD group to a user role within the Guest Server that allows specified users to create accounts. We only allow the users to create up to a 3 day guest account. Anything more requires a request form and an administrator to create the account, up to 1 year. Thanks --------------------- Brian Beausoleil Infrastructure Specialist Office of Information Technology Southern CT State University On 10/19/10 5:07 PM, "Jeremy Shoemaker" <[email protected]> wrote: >How do your valid accounts create the sponsored accounts? > >Thanks, > >Jeremy L. Shoemaker >Systems Administrator >Dakota Wesleyan University >605-995-2147 >[email protected] >Strategic - WOO - Maximizer - Achiever - Learner > > >-----Original Message----- >From: Cisco Clean Access Users and Administrators >[mailto:[email protected]] On Behalf Of David Pifer >Sent: Tuesday, October 19, 2010 3:49 PM >To: [email protected] >Subject: Re: Guest Wireless > >Ditto to this configuration here at Indiana State University. > > >David Pifer >OIT Networking >812.237.2923 > > >-----Original Message----- >From: Cisco Clean Access Users and Administrators >[mailto:[email protected]] On Behalf Of Cal Frye >Sent: Tuesday, October 19, 2010 1:41 PM >To: [email protected] >Subject: Re: Guest Wireless > >On 10/15/10 1:57 PM, King, Ronald A. wrote: >> Is anyone using NAC in any type of role with guest wireless access? >> We have wide open access now but need to revamp it. > >We use a separate SSID for guest access, with limited access to campus >resources, managed bandwidth, and authentication only. Any valid >account holder may create a sponsored account for guests to use to authenticate. > >-- >Best regards >-- Cal Frye, Network Administrator, Oberlin College > Mudd Library, x.56930 -- CIT will NEVER ask you for your password! > > www.calfrye.com, www.oberlin.edu/cit/ > >"What lies behind you and what lies before you are tiny matters >compared to what lies within you." --Ralph Waldo Emerson.
