Release Notes for Cisco NAC Guest Server, Release 1.0.0

Table Of Contents

Release Notes for Cisco NAC Guest Server, Release 1.0.0

Contents

Cisco NAC Guest Server Releases

System Requirements

Hardware Supported

Determining the Software Version

Upgrading to a New Software Release

Backup Information

New and Changed Information

New Software Features in Release 1.0.0

Caveats

Open Caveats - Release 1.0.0

Documentation Updates

Related Documentation

Obtaining Documentation and Submitting a Service Request

Release Notes for Cisco NAC Guest Server, Release 1.0.0

---

Revised: February 9, 2009, OL-14643-01

Contents

These release notes provide late-breaking and release information for Cisco NAC Guest Server, Release 1.0.0. This document describes new features, changes to existing features, limitation and restrictions ("caveats"), upgrade instructions and related information.

These release notes supplement the Cisco NAC Guest Server Installation and Configuration Guide, Release 1.0.0.

Cisco NAC Guest Server Releases

Cisco NAC Guest Server Version	Release Date
1.0.0 ED	October 23, 2007

System Requirements

The Cisco NAC Guest Server can be integrated with the Cisco NAC Appliance Manager through its API, or with Cisco Wireless LAN controllers through the RADIUS protocol. Cisco NAC Guest Server is compatible with the Cisco NAC Appliance and Cisco Wireless LAN Controller component versions shown in Table 1

Table 1 Components Supported by Cisco NAC Guest Server

Cisco NAC Guest Server Version	Cisco NAC Appliance Version	Wireless LAN Controller Version
1.0.0	4.0.1 and later	4.0.219 and later

Hardware Supported

The Cisco NAC Guest Server is a standalone hardware appliance based on the Cisco NAC Appliance 3310 platform. The Cisco NAC Guest Server is supported only on the NAC-3310 hardware platform.

---

Note The NAC-3310 appliance is based on the HP ProLiant DL140 G3 server and is subject to any BIOS/firmware upgrades required for the DL140 G3. Refer to Supported Hardware and System Requirements for Cisco NAC Appliance (Cisco Clean Access) for detailed instructions.

---

Determining the Software Version

The bottom left of the Cisco NAC Guest Server admin console displays the software version. To determine the current software version, login to the administration interface.

To view the software version from the command line:

1. SSH or console to the Cisco NAC Guest Server.

2. Issue the following command:

cat /guest/www/admin/includes/version.html

Upgrading to a New Software Release

The Cisco NAC Guest Server come pre-installed with initial software release 1.0.0.

If the appliance needs to be re-imaged, refer to the instructions in the installation chapter of the Cisco NAC Guest Server Installation and Configuration Guide, Release 1.0.0.

To download Cisco NAC Guest Server Software, login to the following website:

http://www.cisco.com/cgi-bin/tablebuild.pl/nac-guest

Backup Information

The following postgres commands can be used to perform or restore a database backup of the Guest Server.

Backup

pg_dump -c -U postgres gapdb -f backup.sql

Restore Backup

psql -U postgres gapdb -f backup.sql

New and Changed Information

•New Software Features in Release 1.0.0

New Software Features in Release 1.0.0

Refer to the Cisco NAC Guest Server Installation and Configuration Guide, Release 1.0.0 for a detailed description of all features in the initial release.

Caveats

This section describes related caveats.

---

Note If you are a registered cisco.com user, you can view Bug Toolkit on cisco.com at the following website:

http://www.cisco.com/pcgi-bin/Support/Bugtool/home.pl

To become a registered cisco.com user, go to the following website:

http://tools.cisco.com/RPF/register/register.do

---

Open Caveats - Release 1.0.0

Table 2 List of Open Caveats

DDTS Number	Software Release 1.0.0
	Corrected	Caveat
CSCsk95396	No	The description field for RADIUS clients is mandatory. The workaround is to put any text in this field.
CSCsk95409	No	Accounts are only marked as active in the user interface if they have been correctly created on a NAC Manager (CAM). If there is no NAC Manager they will show as inactive, but will still be valid for authentication by the RADIUS component. This is a cosmetic bug.
CSCsl02391	No	Certain "Other Characters" in passwords are not supported The default password policy includes certain "Other Characters" (non-alphanumeric characters) that cannot be used with the CAM API. This includes the% character. "Other Characters" that are known not to work include: £ % < ¬ ` ' \ | Workaround Use only the following characters in the "Other Characters" field: ! $ ^ & * ( ) - _ = + [ ] { } ; : @ # ~ , > ?
CSCsl06878	No	Certificate files cannot be downloaded When trying to download the certificate, CSR or private key, a zero length file is downloaded. Workaround 1. To successfully download one of the files, SSH into the Cisco NAC Guest Server and authenticate with the root account. 2. To enable downloading of the certificate run the following command from the CLI: chmod 644 /etc/pki/tls/certs/localhost.crt 3. To enable downloading of the certificate signing request, run the following command from the CLI after you have created the temporary certificate: chmod 644 /etc/pki/tls/certs/localhost.csr 4. To download the private key, run the following command from the CLI: chmod 644 /etc/pki/tls/private/localhost.key Note Instead of changing the permissions of the private key, it is recommended to download the private key using SCP to the NAC Guest Server from the following location: /etc/pki/tls/private/localhost.key. In future versions of theNAC Guest Server , this will be the only method of downloading the private key.
CSCsm18249	No	Date Picker doesn't display correctly in IE 6 When using Internet Explorer 6 the Javascript Date Picker doesn't display correctly. The Date Picker gets confused with the Timezone dropdown. This bug only affects Internet Explorer 6 and earlier. Workaround Select the date using the drop downs, do not use the Javascript Date Picker.
CSCsm18263	No	Full reporting shows all accounts regardless of permissions If you don't wish to allow sponsors to view all the accounts created by any user, set their group permission to be "No". This will not allow them to run full reports at all. Workaround The Full reporting report allows access to all guest accounts created, even if the logged in user only has "own accounts" permissions.
CSCsm23361	No	Create user template changes not working When the template is changed for the button on the Create user page the page will not submit correctly. This affects version 1.0.0 only. Workaround In the templates section under 'Create User', the setting for 'Add User Button' must be set to 'Add User'

Documentation Updates

Table 3 Updates to Release Notes for Cisco NAC Guest Server, Release 1.0.0

Date	Description
2/6/08	Added caveats CSCsm18249, CSCsm18263 to Table 2; updated boilerplate.
1/25/08	Added Backup Information.
1/16/08	Added caveat CSCsm23361 to Table 2.
10/26/07	Added caveat CSCsl06878 to Table 2.
10/25/07	Added caveat CSCsl02391 to Table 2.
10/23/07	Cisco NAC Guest Server Release 1.0.0

Related Documentation

For the latest updates to Cisco NAC Guest Server and Cisco NAC Appliance documentation on Cisco.com see: http://www.cisco.com/en/US/products/ps6128/tsd_products_support_series_home.html

or simply http://www.cisco.com/go/nac/appliance

•Release Notes for Cisco NAC Guest Server, Release 1.0.0 (this document)

•Cisco NAC Guest Server Installation and Configuration Guide, Release 1.0.0

•Cisco NAC Appliance Service Contract/Licensing Support

•Cisco NAC Guest Server Data Sheet

•Cisco NAC Guest Server Q & A

•Cisco NAC Appliance - Cisco Clean Access Manager Installation and Configuration Guide

•Cisco Wireless LAN Controller Configuration Guide, Release 4.0

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information, see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco technical documentation, at:

http://www.cisco.com/en/US/docs/general/whatsnew/whatsnew.html

Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free service and Cisco currently supports RSS version 2.0.

This document is to be used in conjunction with the documents listed in the "Related Documentation" section.

CCDE, CCVP, Cisco Eos, Cisco StadiumVision, the Cisco logo, DCE, and Welcome to the Human Network are trademarks; Changing the Way We Work, Live, Play, and Learn is a service mark; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Event Center, Fast Step, Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MGX, Networkers, Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.

All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0801R)

Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses in illustrative content is unintentional and coincidental.