The short answer (I'm a little pressed for time this morning) The Ignition server (The radius server) has a lot of policy features, that are very well laid out. We're slowly implementing policy based wireless networking using the policy features. Immediate plans are to have our Staff and Students on separate VLANS. (This is determined via group membership in Active directory)
We are using the Guest Manager, and the Autoconnect Product. We have a Open broadcasted SSID out there, that resolves back to a splash page. The splash page has two buttons. The top button launches Autoconnect, which will configure all the 802.1x settings for our Staff/Students (anyone with a BSC account). The bottom button launches the guest manager application, which allows the user to create a time limited account. (We have a bunch of other restrictions on it like bandwidth, and access to college resources). After the account is created, it then launches the Autoconnect to configure they're wireless settings. We are also using the above mentioned Policy features, so our Guest users are on the same SSID, but they are on a third VLAN. >From your use requirements, it sounds like the Provisioner feature is right up your ally. As the Guest Manager Admin, you can create Provisioners. Each Provisioner account can be configured for the max amount of time they are allowed to create accounts, what access zones, and network right are allowed (This all ties back to the policy features.) Provisioner can be configured to 1. Not be able to see or edit password. 2. Edit but not see password (Reset it) 3. See and edit password. Please don't hesitate to ask more questions. Mike -----Original Message----- From: Hector J Rios [mailto:[EMAIL PROTECTED] Sent: Thursday, November 15, 2007 4:02 PM To: [email protected] Subject: Re: [WIRELESS-LAN] idEngines AAA server Mike, We demoed the product last week and we were very impressed. In fact, the amount of features and things you can do with it were actually overwhelming. I'm interested to hear how you are using it and exactly what features you've found helpful that other products don't have. In particular, I liked the guest manager because it allows you to provide an interface to your users to be able to create guest accounts and also manage them. We currently have an application that we wrote in-house where our staff and faculty can go to to create guest accounts for up to seven days. The challenge is that among our staff and faculty, there are those that have special needs and need to be able to create accounts for longer than 7 days, change passwords, that kind of thing. I know this is not available now, but I was told that with guest manager you will be able to provide this type of access. In our case, we authenticate users via AD. So if and when this feature becomes available, we should be able to create an AD group where we can add the users with special needs. The other reason why we are interested in idEngines is because if you create guest accounts using Cisco's Lobby Ambassador (if you are familiar with WCS), those accounts are only valid for WLANs with WebAuth. We've been having to pull all kinds of tricks to be able to create accounts for our secure PEAP WLAN, our guest WebAuth WLAN, and our wired LAN. It would be nice to have one interface that does it all. Thanks, -Hector -----Original Message----- From: King, Michael [mailto:[EMAIL PROTECTED] Sent: Thursday, November 15, 2007 8:39 AM To: [email protected] Subject: Re: [WIRELESS-LAN] idEngines AAA server We have it here. You may contact me on or off list. (We also have the Autoconnect product, and the Guest Manager) Mike -----Original Message----- From: Hector J Rios [mailto:[EMAIL PROTECTED] Sent: Thursday, November 15, 2007 9:33 AM To: [email protected] Subject: [WIRELESS-LAN] idEngines AAA server This is for those of you that are familiar with idEngines' AAA server, Ignition Server. We are considering this product to replace our Cisco ACS servers. From what I've seen so far, the Ignition Server seems much more granular and feature-rich. One of the features that we liked the most is their Guest manager. Is there anybody that is currently using this product? I'd be interested to hear what you think about it. Thanks Hector Rios Telecommunications Analyst, NI LSU Information Technology Services ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
