Cisco NAC Guest Server Installation and Configuration Guide, Release 1.0.0

Sponsor Documentation

---

This chapter provides example user documentation for sponsor users who create guest accounts. It contains the following sections:

•Introduction to Cisco NAC Guest Server

•Connecting to the Guest Server

•Creating Guest User Accounts

•Editing Guest Accounts

•Suspending Guest Accounts

•Viewing Active Accounts and Resending Details

•Reporting on Guest Users

Introduction to Cisco NAC Guest Server

Cisco NAC Guest Server allows you to create temporary network access accounts for your guests, visitors, contractors or anyone who needs temporary network access. You can easily create guest accounts by browsing to the Cisco Guest Server web interface, logging in with your corporate credentials, and entering the guest's details. Cisco NAC Guest Server creates the temporary account and allows you to provide the account details to the guest via printout, email or SMS text message.

In addition to being able to create guest accounts, you can also view and amend the accounts to which you have access, or run reporting on accounts for auditing purposes.

Connecting to the Guest Server

All connections to the Cisco NAC Guest Server are through a web interface. To connect to the Cisco NAC Guest Server, open a web browser and enter its address into the URL or address field as provided by your network administrator.

---

Step 1 Enter the address of the Cisco NAC Guest Server into the URL fields of a web browser, for example, http://nac-guest-server (Figure 12-1).

Figure 12-1 Authentication Screen

Step 2 In the Cisco Guest Server login page, enter your Username and Password and click the Login button (Figure 12-1).Use the login credentials specified by your network administrator.

Step 3 On successful login, you will see the "Welcome to the Cisco Guest Server" page (Figure 12-2).

Figure 12-2 Main Screen

---

Creating Guest User Accounts

If you are assigned the appropriate permissions, you can create temporary guest user accounts.

---

Step 1 From the Main page, either click the link for "Create a Guest User Account" or select User Accounts > Create from the left hand menu.

Step 2 The "Create a Guest User Account" page displays (Figure 12-3).

Figure 12-3 Create a Guest User Account

Step 3 Enter the First Name of your guest

Step 4 Enter the Last Name of your guest

Step 5 Enter the Company or organization of your guest.

Step 6 Enter the Email Address of your guest.

Step 7 Enter the Mobile Phone Number of your guest. It is recommended to enter only numbers.

Step 8 From the Account Start Time and Account Start Date dropdown lists, choose the time and date from which you want the account to be valid.

Step 9 From the Account End Time and Account End Date dropdown lists, choose the time and date you want the account to end.

Step 10 Choose the Timezone relevant to the time and date.

Step 11 Click the Add User button. The account is created and the details are displayed at the top of the page (Figure 12-4).

Figure 12-4 Guest User Created

Step 12 Depending on your permissions, you can perform one or all of the following actions on the same page where the new account details are displayed:

•Print Account Details — Clicking the Print button lets you print the account details to your printer to hand to the guest. These details commonly include guest access instructions and usage policies.

•Email Account Details—Clicking the Email button emails the account details to the email address you entered for the guest.

•Text Message Account Details (SMS)—Clicking the SMS button sends the account details to the guest's mobile phone via SMS text message.

Step 13 You can also continue directly to create another account by clicking the Add User button at the bottom of the page.

---

Print Account Details

---

Step 1 Click the Print button.

Figure 12-5 Print Account Details

Step 2 A new Printer window opens and you can print out the guest user details.

---

Email Account Details

---

Step 1 Click the Email button.

Step 2 The Cisco NAC Guest Server will send an email to the email address specified when you created the account.

---

Text Message Account Details (SMS)

---

Step 1 Click the SMS button.

Step 2 The Cisco NAC Guest Server will send a text message to the phone number specified in the account creation screen.

---

Editing Guest Accounts

If you create an account for a guest and you need to extend their account access, you can change the expiry date and time of the account.

---

Step 1 From the Main page, either click the link for "Edit Guest User Account end time" or select User Accounts > Edit from the left hand menu.

Step 2 In the Edit User Accounts page (Figure 12-6), you can view a list of the accounts that you are able to edit.

Figure 12-6 Edit Guest User Accounts List

Step 3 Click the Edit button next to the account you want to change.

Figure 12-7 Edit Guest Account

Step 4 Change the Account Expires Time and/or Date as desired.

Step 5 Click the Submit button to update the account with the new end time.

---

Suspending Guest Accounts

You can terminate an account so that a guest can no longer login. To do this, you will also need to contact your network administrator to make sure that the user has been removed from the network. Depending on the access method this may happen automatically.

---

Step 1 From the Main page, either click the link for "Suspend Guest User Accounts" or select User Accounts > Suspend from the left hand menu.

Figure 12-8 Suspend Accounts

Step 2 In the Suspend User Accounts page (Figure 12-8), you can view a list of the accounts that you are able to suspend.

Step 3 Click the Suspend button for the account you want to terminate. The account is removed from the list.

---

Viewing Active Accounts and Resending Details

Cisco NAC Guest Server provides an Active Accounts page that lets you view the active accounts you created or have permissions to see. This page allows you to view, print, email or text message (SMS) the account access details to guests if they have lost or forgotten them.

---

Step 1 From the Main page, either click the link for "Report on Guest User Accounts" or select Reporting > Active Accounts from the left hand menu.

Figure 12-9 Active Accounts

Step 2 In the Cisco NAC Guest Server Reporting page (Figure 12-9), click the Print, Email or SMS button next to the account to bring up the details for that account. Clicking the Email button will email the account details to the guest. Clicking SMS will send a text message with the account details to the guest.

---

Reporting on Guest Users

If you have the appropriate permissions, you can generate full reporting on guest user accounts. You can run reports to view who created guest accounts, when they were created, and access details for the guests themselves, such login time, logout time, and IP address used.

---

Step 1 From the Main page, select Reporting > Full Reporting from the left hand menu.

Figure 12-10 Full Reporting

Step 2 The Cisco NAC Guest Server Reporting page (Figure 12-10) initially displays the complete report for your user permissions. To shorten or filter the report, modify the dropdown menus at the top of the screen then click the Submit button. If you want to search for a specific First Name, Last Name, Company or Email address by typing the full or partial text in the corresponding text field and clicking the Submit button.

Step 3 Click the Submit button. The report displays the bottom of the screen (Figure 12-11).

Figure 12-11 Example Details for Guest Account

Step 4 To see usage details for a particular account, click the Details button next to the account. The Detailed Login report opens in the same screen and lists the following details:

•User IP Address for the guest

•Logged In time (date, time, and timezone)

•Logged Out time (date, time, and timezone)

•Duration of session (in hh:mm:ss format)

This information can be useful for auditing purposes.

---