Welcome to Cisco NAC Guest Server
The Cisco NAC Guest Server is a complete provisioning and reporting system that provides temporary network access for guests, visitors, contractors, consultants or customers. The Guest Server works alongside Cisco NAC Appliance or Cisco Wireless LAN Controller which provide the captive portal and enforcement point for guest access.
Cisco NAC Guest Server allows any user with privileges to easily create temporary guest accounts and sponsor guests. Cisco NAC Guest Server performs full authentication of sponsors, the users who create guest accounts, and allows sponsors to provide account details to the guest by printout, email or SMS. The entire experience, from user account creation to guest network access, is stored for audit and reporting.
When guest accounts are created, they are either provisioned within the Cisco NAC Appliance Manager (Clean Access Manager) or stored within the built-in database on the Cisco NAC Guest Server. When using the Guest Server's built-in database, external network access devices, such as the Cisco Wireless LAN Controller, can authenticate users against the Guest Server using the RADIUS (Remote Authentication Dial In User Service) protocol.
The Cisco NAC Guest Server provisions the guest account for the amount of time specified when the account is created. Upon expiry of the account, the Guest Server either deletes the account directly from the Cisco NAC Appliance Manager or sends a RADIUS message which notifies the network access device (NAD) of the amount of valid time remaining for the account before the NAD should remove the user.
Cisco NAC Guest Server provides vital guest network access accounting by consolidating the entire audit trail from guest account creation to guest use of the account so that reports can be performed through a central management interface.
Guest Access Concepts
Cisco NAC Guest Server makes use of a number of terms to explain the components needed to provide guest access.
The Guest User is the person who needs a user account to access the network.
The Sponsor is the person who creates the guest user account. This person is often an employee of the organization that provides the network access. Sponsors can be specific individuals with certain job roles, or can be any employee who can authenticate against a corporate directory such as Microsoft Active Directory (AD).
Network Enforcement Device
These devices are the network infrastructure components that provide the network access. Additionally, network enforcement device are responsible for pushing guest users to a captive portal where they can enter their guest account details. When a guest enters his or her temporary user name and password, the network enforcement device checks those credentials against the guest accounts created by the Guest Server.
This is the Cisco NAC Guest Server, which ties together all the pieces of guest access. The Guest Server links the sponsor creating the guest account, the account details passed to the guest, the guest authentication against the network enforcement device, and the network enforcement device's verification of the guest with the Guest Server. Additionally, the Cisco NAC Guest Server consolidates accounting information from network enforcement devices to provide a single point of guest access reporting.
Before You Start
This section describes the following:
•Cisco NAC Guest Server Licensing
Verify the contents of the packing box (Figure 1-1) to ensure that you have received all items necessary to install your Cisco NAC Guest Server. Save the packing material in case you need to repack the unit. If any item is missing or damaged, contact your Cisco representative or reseller for instructions.
Figure 1-1 Shipping Box Contents
Note Because product software is preloaded onto the Cisco NAC Guest Server appliance, the shipping contents do not include a separate software installation CD.
The Cisco NAC Guest Server occupies one rack unit (1U). A rack-mounting kit is included in the shipment. For rack-mounting information and instructions, refer to the 1U Rack Hardware Installation Instructions for HP Products document also included in the shipment.
Cisco NAC Guest Server Licensing
You need to obtain and install a FlexLM product license for your Cisco NAC Guest Server via its web interface for your system to work. See Accessing the Administration Interface, page 3-1 for instructions on how to obtain and install license(s) for your system.
For additional details, refer to Cisco NAC Appliance Service Contract / Licensing Support.
The Cisco NAC Guest Server is based on the Cisco NAC Appliance 3310 (NAC-3310) hardware platform. The Cisco NAC Guest Server appliance is subject to any system BIOS/Firmware upgrades required for the server model on which it is based. NAC-3310 is based on the HP ProLiant DL140 G3 and may require periodic firmware upgrades.
Note For further details refer to Supported Hardware and System Requirements for Cisco NAC Appliance (Cisco Clean Access).
For late-breaking or additional details for this release, refer to the Release Notes for Cisco NAC Guest Server, Release 1.0.0.
For the latest online updates to this guide, visit http://www.cisco.com/en/US/products/ps6128/products_installation_and_configuration_guides_list.html
See Product Documentation for a list of related documentation for Cisco NAC Guest Server.
For details on how to obtain technical support, refer to section Obtaining Documentation and Submitting a Service Request.