Configuring Wired Guest Access - Cisco 2100 Series Configuration Manual

Chapter 10 Managing User Accounts
If you want to define the order in which web authentication servers are contacted, enter this command:
Step 4
config wlan security web-auth server-precedence wlan_id {local | ldap | radius} {local | ldap |
radius} {local | ldap | radius}
The default order of server web authentication is local, RADIUS, LDAP.
Note
Step 5 To define which web authentication page displays for a wireless guest user, enter this command:
config wlan custom-web webauth-type {internal | customized | external} wlan_id
where
•
•
•
To use a WLAN-specific custom web configuration rather than a global custom web configuration, enter
Step 6
this command:
config wlan custom-web global disable wlan_id
Note
To save your changes, enter this command:
Step 7
save config

Configuring Wired Guest Access

Wired guest access enables guest users to connect to the guest access network from a wired Ethernet
connection designated and configured for guest access. Wired guest access ports might be available in a
guest office or through specific ports in a conference room. Like wireless guest user accounts, wired
guest access ports are added to the network using the lobby ambassador feature.
Wired guest access can be configured in a standalone configuration or in a dual-controller configuration
that uses both an anchor controller and a foreign controller. This latter configuration is used to further
isolate wired guest access traffic but is not required for deployment of wired guest access.
Wired guest access ports initially terminate on a Layer 2 access switch or switch port configured with
VLAN interfaces for wired guest access traffic. The wired guest traffic is then trunked from the access
switch to a controller. This controller is configured with an interface that is mapped to a wired guest
access VLAN on the access switch. See
OL-17037-01
All external servers must be pre-configured on the controller. You can configure them on the
RADIUS Authentication Servers page and the LDAP Servers page.
internal displays the default web login page for the controller. This is the default value.
customized displays the custom web login page that was configured in
You do not need to define the web authentication type in
Note
logout pages as they are always customized.
external redirects users to the URL that was configured in
If you enter the config wlan custom-web global enable wlan_id command, the custom web
authentication configuration at the global level is used.
Step
Figure 10-15.
Cisco Wireless LAN Controller Configuration Guide
Configuring Wired Guest Access
Step 2.
Step 5 for the login failure and
3.
10-23