Cisco NAC Guest Server Installation and Configuration Guide, Release 1.1.2
Sponsor Documentation

Table Of Contents

Sponsor Documentation

Introduction to Cisco NAC Guest Server

Connecting to the Guest Server

Creating Guest User Accounts

Print Account Details

Email Account Details

Text Message Account Details (SMS)

Multiple Guest Accounts

Creating Multiple Accounts from Text Entry

Creating Multiple Accounts from CSV File

Creating Multiple Random Accounts

Printing/Email/SMS Multiple Accounts

Viewing Multiple Account Groups

Viewing Multiple Account Groups

Finding Multiple Account Groups by username

Finding Multiple Account Groups on the Active Accounts Report.

Editing Guest Accounts

Suspending Guest Accounts

Viewing Active Accounts and Resending Details

Reporting on Guest Users


Sponsor Documentation


This chapter provides example user documentation for sponsor users who create guest accounts. It contains the following sections:

Introduction to Cisco NAC Guest Server

Connecting to the Guest Server

Creating Guest User Accounts

Multiple Guest Accounts

Editing Guest Accounts

Suspending Guest Accounts

Viewing Active Accounts and Resending Details

Reporting on Guest Users

Introduction to Cisco NAC Guest Server

Cisco NAC Guest Server allows you to create temporary network access accounts for your guests, visitors, contractors or anyone who needs temporary network access. You can easily create guest accounts by browsing to the Cisco Guest Server web interface, logging in with your corporate credentials, and entering the guest's details. Cisco NAC Guest Server creates the temporary account and allows you to provide the account details to the guest via printout, email or SMS text message.

In addition to being able to create guest accounts, you can also view and amend the accounts to which you have access, or run reporting on accounts for auditing purposes.

Connecting to the Guest Server

All connections to the Cisco NAC Guest Server are through a web interface. To connect to the Cisco NAC Guest Server, open a web browser and enter its address into the URL or address field as provided by your network administrator.


Step 1 Enter the address of the Cisco NAC Guest Server into the URL fields of a web browser, for example, http://nac-guest-server (Figure 15-1).

Figure 15-1 Authentication Screen

Step 2 In the Cisco Guest Server login page, enter your Username and Password and click the Login button (Figure 15-1). Use the login credentials specified by your network administrator.

Step 3 On your first successful login you may see the User Default Setting page (Figure 15-2) where you can change default settings like the language template, time zone, and telephone country code as described in Step 4.

Otherwise, the "Welcome to the Cisco NAC Guest Server" page (Figure 15-3) likely appears. If so, and you would like to change the default settings, select the My Settings > Preferences link using the left hand menu and proceed to Step 4.

Figure 15-2 Default Settings Page

Step 4 In the default settings you can customize the settings for the following:

Language Template—If your administrator has added additional templates, you can select the one that you want to use. This may include the application or guest printout/email/sms in a different language.

Default Timezone—You can specify the default setting for the time zone where guests user accounts are created. You can override this at creation of the guest if you like.

Default Telephone Country Code—Specify the default for the telephone country code. This is used when sending the guest details by SMS, or for recording the guests phone number.

Default Location—The only option currently available is the Default Location.

Email Address—Enter your email address here. This is needed if you want to receive a copy of the guests account details by email.

Receive Email Confirmation—Check this box if you would like the Cisco NAC Guest Server to send a copy of the guests account details by email when you create a guest account.

Default Login Page—Select the page that you would like the Cisco NAC Guest Server to take you to immediately after you login.

Step 5 Click the Submit button when you are happy with your default settings.

On successful login or after saving the default settings, you will see the "Welcome to the Cisco NAC Guest Server" page (Figure 15-3).

Figure 15-3 Main Screen

Creating Guest User Accounts

If you are assigned the appropriate permissions, you can create temporary guest user accounts.


Step 1 From the Main page, either click Create a Guest User Account or select User Accounts > Create from the left hand menu.

Step 2 The Create a Guest User Account page appears (Figure 15-4).

Figure 15-4 Create a Guest User Account

Step 3 Enter the First Name of your guest.

Step 4 Enter the Last Name of your guest.

Step 5 Enter the Company or organization of your guest.

Step 6 Enter the Mobile Phone Number of your guest.

Step 7 Choose the Role you would like to assign the guest to.

Step 8 Enter the Email Address of your guest.

Step 9 From the Account Start Time and Account Start Date dropdown lists, choose the time and date from which you want the account to be valid.

Step 10 From the Account End Time and Account End Date dropdown lists, choose the time and date you want the account to end.

Step 11 Choose the Timezone relevant to the time and date.

Step 12 If the Guest Server administrator as configured any additional required account attributes, specify the appropriate information for those settings in this form. (For example, the administrator may require the guest user's contact Mobile Phone Number.)

Step 13 Click the Add User button. The account is created and the details are displayed at the top of the page (Figure 15-5).

Figure 15-5 Guest User Created

Step 14 Depending on your permissions, you can perform one or all of the following actions on the same page where the new account details are displayed:

Print Account Details—Clicking the Print Account button lets you print the account details to your printer to hand to the guest. These details commonly include guest access instructions and usage policies.

Email Account Details—Clicking the Email Account button emails the account details to the email address you entered for the guest.

Text Message Account Details (SMS)—Clicking the Send SMS Message button sends the account details to the guest's mobile phone via SMS text message.

Step 15 You can also continue directly to create another account by entering another guests details and clicking the Add User button at the bottom of the page.


Print Account Details


Step 1 Click the Print Account button.

Figure 15-6 Print Account Details

A new Printer window opens and you can print out the guest user details.


Email Account Details


Step 1 Click the Email Account button.

The Cisco NAC Guest Server sends an email to the email address specified when you created the account.


Text Message Account Details (SMS)


Step 1 Click the Send SMS Message button.

The Cisco NAC Guest Server sends a text message to the phone number specified in the account creation screen.


Multiple Guest Accounts

The Cisco NAC Guest Server allows you to create multiple accounts at the same time. You can create multiple accounts by pasting the details into the interface, importing a Comma Separated Values (CSV) file, or by creating random accounts to be assigned to guest users (with the details recorded on paper) for input at a later time. The options that will be available to you are configured by your administrator.

Figure 15-7 Multiple Accounts

Creating Multiple Accounts from Text Entry


Step 1 Select User Accounts > Multiple Accounts from the left hand menu (Figure 15-7).

Step 2 Select Create Multiple Accounts (Figure 15-8).

Figure 15-8 Multiple Accounts from text entry

Step 3 Enter the details in the text field as requested with a comma separating the values.

Step 4 Select the Account Start time, Account End time, and Timezone for the account.

Step 5 Click the Create Bulk Accounts button.


Creating Multiple Accounts from CSV File


Step 1 Select User Accounts > Multiple Accounts from the left hand menu (Figure 15-7).

Step 2 Select Import Accounts from File (Figure 15-9).

Figure 15-9 Multiple Accounts from CSV File

Step 3 Download the CSV Template file.

Step 4 Fill out the CSV Template file using a program such as Microsoft Excel.

Step 5 Save the CSV Template file in CSV format.

Step 6 Click Choose File or Browse and select the CSV file.

Step 7 Select the Account Start time, Account End time, and Timezone for the account.

Step 8 Click the Upload CSV button.


Creating Multiple Random Accounts

You can create random accounts when you want to hand out details to visitors and then record the details on paper for recording in the system, or storing for correlation at a later date. This is useful when you don't have access to a computer to create accounts when you need to provide guest accounts.


Step 1 Select User Accounts > Multiple Accounts from the left hand menu (Figure 15-7).

Step 2 Select Create Accounts with Random Username/Password (Figure 15-10).

Figure 15-10 Create Random Accounts

Step 3 Enter the amount of accounts that you want to generate.

Step 4 Specify the Account Start time, Account End time, and Timezone.

Step 5 Click the Submit button.


Printing/Email/SMS Multiple Accounts

When you have created accounts using one of the multiple account creation methods the screen for the users details is slightly different to the single user.

Figure 15-11 Print/Email/SMS for text/csv creation methods

Figure 15-12 Print for random account creation

When creating accounts with preset details (by either importing text or creating a CSV file), you can print, email, or transmit via SMS the guest account details (Figure 15-11). When you create random accounts, however, you can only use the print option (Figure 15-12).

The additional options to both of these is the ability to perform the required action for all accounts at the same time by clicking the <action> All button at the top right of the table.

For the random accounts it is also useful to print the table out so that you can write down the corresponding guests details for later input in to the Cisco NAC Guest Server.

Viewing Multiple Account Groups

When you create multiple accounts you may want to find the batch of accounts that were created at the same time. You can accomplish this using one of the following three methods:

Viewing Multiple Account Groups

Finding Multiple Account Groups by username

Finding Multiple Account Groups on the Active Accounts Report.

Viewing Multiple Account Groups

This option allows you to select the batch of accounts that you created.


Step 1 Select User Accounts > Multiple Accounts from the left hand menu (Figure 15-7).

Step 2 Select Show Multiple Account Groups.

Figure 15-13 Multiple Account Groups

Step 3 Click the Edit button to edit the bulk accounts.


Finding Multiple Account Groups by username

This option allows you to find the batch of accounts by entering one username of the batch.


Step 1 Select User Accounts > Multiple Accounts from the left hand menu (Figure 15-7).

Step 2 Enter a username that belongs to a batch of accounts in the username field and click the Submit button.

The batch of accounts that were created in the same operation as the username submitted will be shown, if found.


Finding Multiple Account Groups on the Active Accounts Report.

This option allows you to jump to the batch of accounts from the Active Accounts Report.


Step 1 Select Reports > Active Accounts from the left hand menu.

Step 2 Any user account that is part of a multiple account creation operation will have a Bulk Account link next to the username. Click this link to jump to the rest of the accounts for editing.

Figure 15-14 Bulk Accounts on the Active Accounts Report.


Editing Guest Accounts

If you create an account for a guest and you need to extend their account access, you can change the expiry date and time of the account.


Step 1 From the Main page, either click the link for Edit Guest User Account end time or select User Accounts > Edit from the left hand menu.

Step 2 In the Edit User Accounts page or any of the multiple account reports (Figure 15-15), you can view a list of the accounts that you are able to edit.

Figure 15-15 Edit Guest User Accounts List

Step 3 Click the Edit button next to the account you want to change.

Figure 15-16 Edit Guest Account

Step 4 Change the Account details as desired.

Step 5 Click the Submit button to update the account with the new details.


Suspending Guest Accounts

You can terminate an account so that a guest can no longer login. To do this, you will also need to contact your network administrator to make sure that the user has been removed from the network. Depending on the access method this may happen automatically.


Step 1 From the Main page, either click Suspend Guest User Accounts or select User Accounts > Suspend from the left hand menu.

Figure 15-17 Suspend Accounts

Step 2 In the Suspend User Accounts page (Figure 15-17), you can view a list of the accounts that you are able to suspend.

Step 3 Click the Suspend button for the account you want to terminate. The account is removed from the list and the guest will not be able to login anymore.


Viewing Active Accounts and Resending Details

Cisco NAC Guest Server provides an Active Accounts page that lets you view the active accounts you created or have permissions to see. This page allows you to view, print, email or text message (SMS) the account access details to guests if they have lost or forgotten them.


Step 1 From the Main page, either click Report on Guest User Accounts or select Reporting > Active Accounts from the left hand menu.

Figure 15-18 Active Accounts

Step 2 In the Cisco NAC Guest Server Reporting page (Figure 15-18), click the Print, Email, or SMS button next to the account to bring up the details for that account. Clicking the Email button will email the account details to the guest. Clicking SMS will send a text message with the account details to the guest.


Reporting on Guest Users

If you have the appropriate permissions, you can generate full reporting on guest user accounts. You can run reports to view who created guest accounts, when they were created, and access details for the guests themselves, such login time, logout time, and IP address used.


Step 1 From the Main page, select Reporting > Full Reporting from the left hand menu.

Figure 15-19 Full Reporting

Step 2 The Cisco NAC Guest Server Reporting page (Figure 15-19) initially displays the complete report for your user permissions. To shorten or filter the report, modify the dropdown menus at the top of the screen then click the Submit button. If you want to search for a specific First Name, Last Name, Company, Email address or by IP Address of the guest then by typing the full or partial text in the corresponding text field and clicking the Submit button you will be able to get a more focuses report.

Step 3 If you want to export the full report for the new query, click the Download CSV button to download the report in CSV format.

Step 4 Click the Submit button. The report displays the bottom of the screen (Figure 15-20).

Figure 15-20 Example Details for Guest Account

Step 5 To see usage details for a particular account, click the Details button next to the account. The Detailed Login report opens in the same screen and lists the following details:

User IP Address for the guest

Logged In time (date, time, and timezone)

Logged Out time (date, time, and timezone)

Duration of session (in hh:mm:ss format)

Details of all modifications to the guest account and by which sponsor.

This information can be useful for auditing purposes.