Dell Powerconnect W Clearpass Hardware Appliances Deployment Guide Guest 6.0

2015-01-05

: Dell Dell-Powerconnect-W-Clearpass-Hardware-Appliances-Deployment-Guide-136727 dell-powerconnect-w-clearpass-hardware-appliances-deployment-guide-136727 dell pdf

Open the PDF directly: View PDF .
Page Count: 320 [warning: Documents this large are best viewed by clicking the View PDF Link!]

About this Guide
- Audience
- Conventions
  - Contacting Support
Dell Networking W-ClearPass Guest Overview
Guest Manager
Onboard
Configuration
Hotspot Manager
Administration
Operator Logins
Reference
Glossary
Index

Dell Networking W-

ClearPass Guest 6.0

Deployment Guide

2| Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

less Networks®, the registered Aruba the Mobile Edge Company logo, and Aruba Mobility Management System®.

Dell™, the DELL™ logo, and PowerConnect™ are trademarks of Dell Inc.

Originated in the USA. All other trademarks are the property of their respective owners.

Open Source Code

Certain Aruba products include Open Source software code developed by third parties, including software code

subject to the GNU General Public License (GPL), GNU Lesser General Public License (LGPL), or other Open

Source code used can be found at this site:

http://www.arubanetworks.com/open_source

Legal Notice

The use of Aruba Networks, Inc. switching platforms and software, by all individuals or corporations, to terminate

other vendors’ VPN client devices constitutes complete acceptance of liability by that individual or corporation for

this action and indemnifies, in full, Aruba Networks, Inc. from any and all legal actions that might be taken against it

with respect to infringement of copyright on behalf of those vendors.

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide | 3

Contents

About this Guide 13

Audience 13

Conventions 13

Contacting Support 14

Dell Networking W-ClearPass Guest Overview 15

About Dell Networking W-ClearPass Guest 15

Visitor Access Scenarios 16

Reference Network Diagram 16

Key Interactions 17

AAA Framework 18

Key Features 19

Visitor Management Terminology 20

ClearPass Guest Deployment Process 21

Operational Concerns 21

Network Provisioning 21

Site Preparation Checklist 22

Security Policy Considerations 23

AirGroup Deployment Process 23

Documentation and User Assistance 24

Deployment Guide and Online Help 24

Context-Sensitive Help 24

Field Help 25

Quick Help 25

If You Need More Assistance 25

Use of Cookies 25

Guest Manager 27

Accessing Guest Manager 27

About Guest Management Processes 28

Sponsored Guest Access

The following figure shows the process of sponsored guest access.

Figure 5: Sponsored guest access with guest created by operator

The operator creates the guest accounts and generates a receipt for the account.

The guest logs on to the Network Access Server (NAS) using the credentials provided on her receipt. The NAS

authenticates and authorizes the guest’s login in ClearPass Guest. Once authorized, the guest is able to access the

network.

Self Provisioned Guest Access

Self-provisioned access is similar to sponsored guest access, but there is no need for an operator to create the

account or to print the receipt. The following figure shows the process of self-provisioned guest access.

Figure 6: Guest access when guest is self-provisioned

The guest logs on to the Network Access Server (NAS), which captures the guest and redirects them to a captive

portal login page. From the login page, guests without an account can browse to the guest self-registration page,

where the guest creates a new account. At the conclusion of the registration process, the guest is automatically

redirected to the NAS to log in.

The guest can print or download a receipt, or have the receipt information delivered by SMS or email.

The NAS performs authentication and authorization for the guest in ClearPass Guest. Once authorized, the guest is

then able to access the network.

See"Customizing Self-Provisioned Access " on page 171 for details on creating and managing self-registration pages.

Using Standard Guest Management Features

This section describes:

lHow to create a single guest account and a guest account receipt

lHow to create multiple guest accounts and multiple guest account receipts

lHow to create a single password for multiple accounts

lHow to list and edit single and multiple guest accounts

To customize guest self-registration, please see Configuration on page 133.

Creating a Guest Account

To create a new account, go to Guest > Create Account, or click the Create New Guest Account command link on

the Guest Manager page. The New Visitor Account form opens.

NOTE: The New Visitor Account form (create_user) may be customized by adding new fields, or modifying or removing the

existing fields. See"Customizing Self-Provisioned Access " on page 171 for details about the customization process. The

default settings for this form are described below.

To complete the form, first enter the visitor’s details into the Sponsor’s Name,Visitor Name,Company Name and

Email Address fields. The visitor’s email address will become their username to log into the network.

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Using Standard Guest Management Features | 29

30 | Creating a Guest Account Receipt Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

You can specify the account activation and expiration times. The visitor account cannot be used before the

activation time, or after the expiration time.

The Account Role specifies what type of account the visitor should have.

A random password is created for each visitor account. This is displayed on this form, but will also be available on

the guest account receipt.

You must mark the Terms of Use check box in order to create the visitor account.

Click the Create Account button after completing the form.

Creating a Guest Account Receipt

After you click the Create Account button on the New Visitor Account form, the details for that account are

displayed.

To print a receipt for the visitor, select an appropriate template from the Open print window using template…

list. A new Web browser window will open and the browser’s Print dialog box will be displayed.

Click the Send SMS receipt link to send a guest account receipt via text message. Use the SMS Receipt form to

enter the mobile telephone number to which the receipt should be sent.

Sending SMS receipts requires the SMS Services plugin. If the administrator has enabled automatic SMS, and the

visitor’s phone number was typed into the New Visitor Account form, an SMS message will be sent automatically. A

message is displayed on the account receipt page after an SMS message has been sent.

Click the Send email receipt link to send an email copy of the guest account receipt. Use the Email Receipt form

to enter the email address to which the receipt should be sent. You can also specify the subject line for the email

message. If the administrator has enabled automatic email for guest account receipts, and the visitor’s email address

was typed into the New Visitor Account form, an email receipt will be sent automatically. A message is displayed on

the account receipt page after an email has been sent.

Creating Multiple Guest Accounts

The Create Guest Accounts form is used to create a group of visitor accounts.

To create multiple accounts, go to Guest > Create Multiple, or click the Create Multiple Guest Accounts

command link on the Guest Manager page. The Create Guest Accounts form opens.

NOTE: The Create Guest Accounts form (create_multi) may be customized by adding new fields, or modifying or removing the

existing fields. See "Customizing Self-Provisioned Access " on page 171 for details about the customization process. The

default settings for this form are described below.

To complete the form, you must enter the number of visitor accounts you want to create.

A random username and password will be created for each visitor account. This is not displayed on this form, but

will be available on the guest account receipt.

The visitor accounts cannot be used before the activation time, or after the expiration time.

The Account Role specifies what type of accounts to create.

Click the Create Accounts button after completing the form.

Creating Multiple Guest Account Receipts

Once a group of guest accounts has been created, the details for the accounts are displayed.

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Creating Multiple Guest Account Receipts

|31

32 | Creating a Single Password for Multiple Accounts Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

To print the receipts, select an appropriate template from the Open print window using template… drop-down

list. A new browser window opens with the Print dialog displayed.

To download a copy of the receipt information in CSV format, click the Save list for scratch cards (CSV file)

link. You will be prompted to either open or save the spreadsheet (CSV) file. The fields available in the CSV file are:

lNumber – the sequential number of the visitor account, starting at one

lUsername – the username for the visitor account

lPassword – the password for the visitor account

lRole – the visitor account’s role

lActivation Time – the date and time at which the account will be activated, or N/A if there is no activation

time

lExpiration Time – the date and time at which the account will expire, or N/A if there is no activation time

lLifetime – the account lifetime in minutes, or N/A if the account does not have a lifetime specified

lSuccessful – “Yes” if the account was created successfully, or “No” if there was an error creating the account

Creating a Single Password for Multiple Accounts

You can create multiple accounts that have the same password. In order to do this, you first customize the Create

Multiple Guest Accounts form to include the Password field.

To include the Password field on the Create Multiple Guest Accounts form:

1. Go to Configuration > Forms & Views. Click the create_multi row, then click its Edit Fields link. The

Customize Form Fields view opens, showing a list of the fields included in the Create Multiple Guest Accounts

form and their descriptions.

At this point, the Password field is not listed because the Create Multiple Guest Accounts form (create_multi)

has not yet been customized to include it. You will create it for the form in the next step.

2. Click on any field in the list to expand a row, then click the Insert After link (you can modify this placement

later). The Customize Form Field form opens.

3. In the Field Name row, choose password from the drop-down list. The form displays configuration options for

this field.

4. In the Field row, mark the Enable this field check box.

5. To adjust the placement of the password field on the Create Multiple Guest Accounts form, you may change the

number in the Rank field.

6. In the User Interface row, choose Password text field from the drop-down list. The Field Required check box

should now be automatically marked, and the Validator field should be set to IsNonEmpty.

7. Click Save Changes. The Customize Form Fields view opens again, and the password field is now included and

can be edited.

To create multiple accounts that all use the same password:

1. Go to Guest > Create Multiple. The Create Guest Accounts form opens, and includes the Visitor Password

field.

2. In the Number of Accounts field, enter the number of accounts you wish to create.

3. In the Visitor Password field, enter the password that is to be used by all the accounts.

4. Complete the other fields with the appropriate information, then click Create Accounts. The Finished Creating

Guest Accounts view opens. The password and other account details are displayed for each account.

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Creating a Single Password for Multiple Accounts | 33

34 | Managing Guest Accounts Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

Managing Guest Accounts

Use the Guest Manager Accounts list view to work with individual guest accounts. To open the Guest Manager

Accounts list, go to Guest > List Accounts.

The Guests Manager Accounts view opens.This view (guest_users) may be customized by adding new fields or

modifying or removing the existing fields. See "Customizing Fields " on page 145 for details about this

customization process. The default settings for this view are described below.

The Username,Role,State,Activation, and Expiration columns display information about the visitor accounts that

have been created:

lThe value in the Expiration column is colored red if the account will expire within the next 24 hours. The

expiration time is additionally highlighted in boldface if the account will expire within the next hour.

lIn addition, icons in the Username column indicate the account’s activation status:

n—Visitor account is active

n—Visitor account was created but is not activated yet

n—Visitor account was disabled by Administrator

n—Visitor account has expired

n—Visitor account was deleted

You can use the Filter field to narrow the search parameters. You may enter a simple substring to match a portion of

the username or any other fields that are configured for search, and you can include the following operators:

Operator Meaning Additional Information

= is equal to

You may search for multiple values when using the equality

(=) or inequality !=) operators. To specify multiple values, list

them separated by the pipe character ( | ).

For example, specifying the filter "role_id=2|3, custom_

field=Value" restricts the accounts displayed to those with

role IDs 2 and 3 (Guest and Employee), and with the field

named "custom_field" set to "Value".

!= is not equal to

> is greater than

>= is greater than or equal to

< is less than

<= is less than or equal to

~ matches the regular expression

!~ does not match the regular expression

Table 7:

Operators supported in filters

To restore the default view, click the Clear Filter link.

Use the paging control at the bottom of the list to jump forwards or backwards by one page, or to the first or last

page of the list. You can also click an individual page number to jump directly to that page.

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Managing Guest Accounts

|35

36 | Managing Guest Accounts Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

NOTE: When the list contains numerous user accounts, consider using the Filter field to speed up finding a specific user

account.

Use the Create tab to create new visitor accounts using the New Visitor Account form. See "Creating a Guest

Account " on page 29 for details about this form.

Use the More Options tab for additional functions, including import and export of guest accounts and the ability

to customize the view.

Click a user account’s row to select it. You can then select from one of these actions:

lReset password – Changes the password for a guest account. A new randomly generated password is displayed

on the Reset Password form.

Click Update Account to reset the guest account’s password. A new account receipt is displayed, allowing you

to print a receipt showing the updated account details.

lChange expiration – Changes the expiration time for a guest account.

NOTE: This form (change_expiration) may be customized by adding new fields, or modifying or removing the existing fields.

See "Customizing Forms and Views " on page 150 for details about this customization process.

Select an option from the drop-down list to change the expiration time of the guest account.

Click Update Account to set the new expiration time for the guest account. A new account receipt is

displayed, allowing you to print a receipt showing the updated account details.

lRemove – Disables or deletes a guest account.

Select the appropriate Action radio button, and click Make Changes to disable or delete the account.

If you wish to have automatic disconnect messages sent when the enabled value changes, you can specify this in

the Configuration module. See"Configuring ClearPass Guest Authentication " on page 134.

lActivate – Re-enables a disabled guest account, or specifies an a ctivation time for the guest account.

Select an option from the drop-down list to change the activation time of the guest account. To re-enable an

account that has been disabled, choose Now. Click Enable Account to set the new activation time for the

guest account. A new account receipt is displayed, allowing you to print a receipt showing the updated account

details.

lEdit – Changes the properties of a guest account.

NOTE: This form may be customized by adding new fields, or modifying or removing the existing fields. See "Customizing

Forms and Views " on page 150 for details about this customization process. This is the guest_edit form.

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Managing Guest Accounts

|37

38 | Managing Multiple Guest Accounts Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

Click Update Account to update the properties of the guest account. A new account receipt is displayed,

allowing you to print a receipt showing the updated account details.

lSessions – Displays the active sessions for a guest account. See "Active Sessions Management " on page 59 in

this chapter for details about managing active sessions.

lPrint – Displays the guest account’s receipt and the delivery options for the receipt. For security reasons, the

guest’s password is not displayed on this receipt. To recover a forgotten or lost guest account password, use the

Reset password link.

Managing Multiple Guest Accounts

Use the Edit Accounts list view to work with multiple guest accounts. This view may be accessed by clicking the

Edit Multiple Guest Accounts command link.

This view (guest_multi) may be customized by adding new fields or by modifying or removing the existing fields.

See "Customizing Self-Provisioned Access " on page 171 for details about this customization process. The default

settings for this view are described below.

The Username,Role,State,Activation, and Expiration columns display information about the visitor accounts that

have been created:

lThe value in the Expiration column is colored red if the visitor account will expire within the next 24 hours. The

expiration time is additionally highlighted in boldface if the visitor account will expire within the next hour.

lIn addition, icons in the Username column indicate the account’s activation status:

n—Visitor account is active

n—Visitor account was created but is not activated yet

n—Visitor account was disabled by Administrator

n—Visitor account has expired

You can use the Filter field to narrow the search parameters. You may enter a simple substring to match a portion of

the username or any other fields that are configured for search, and you can include the following operators:

Operator Meaning Additional Information

= is equal to

You may search for multiple values when using the equality

(=) or inequality !=) operators. To specify multiple values, list

them separated by the pipe character ( | ).

For example, specifying the filter "role_id=2|3, custom_

field=Value" restricts the accounts displayed to those with

role IDs 2 and 3 (Guest and Employee), and with the field

named "custom_field" set to "Value".

!= is not equal to

> is greater than

>= is greater than or equal to

< is less than

<= is less than or equal to

~ matches the regular expression

!~ does not match the regular expression

Table 8:

Operators supported in filters

To restore the default view, click the Clear Filter link.

Use the paging control at the bottom of the list to jump forwards or backwards by one page, or to the first or last

page of the list. You can also click an individual page number to jump directly to that page.

To select guest accounts, click the accounts you want to work with. You may click either the check box or the row

to select a visitor account. To select or unselect all visible visitor accounts, click the check box in the header row of

the table.

Use the selection row at the top of the table to work with the current set of selected accounts. The number of

currently selected accounts is shown. When a filter is in effect, the “All Matching” link can be used to add all pages

of the filtered result to the selection.

Use the Create tab to create new visitor accounts using the Create Guest Accounts form. See "Managing

Multiple Guest Accounts " on page 38 in this chapter for details about this form.

Use the Delete tab to delete the visitor accounts that you have selected. This option is not active if there are no

visitor accounts selected.

Use the Edit tab to make changes to multiple visitor accounts at once. This option is not active if there are no

visitor accounts selected.

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Managing Multiple Guest Accounts

|39

40 | Importing Guest Accounts Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

The Edit Guest Accounts form may be customized by adding new fields, or modifying or removing the existing

fields. See "Customizing Self-Provisioned Access " on page 171 for details about this customization process. This is

the guest_multi_form form.

The Results tab will be automatically selected after you have made changes to one or more guest accounts. You

can create new guest account receipts or download the updated guest account information. See "Creating Multiple

Guest Account Receipts " on page 31 in this chapter for more information.

The More Options tab includes the Choose Columns command link. You can click this link to open the

Configuration module’s Customize View Fields form, which may be used to customize the Edit Guest Accounts

view.

Importing Guest Accounts

Guest accounts may be created from an existing list by uploading the list to ClearPass Guest. To upload a list of

existing accounts, go to Guest > Import Accounts, or click the Import Guest Accounts command link on the

Guest Manager page. The Upload User List form opens.

The Upload User List form provides you with different options for importing guest account data.

To complete the form, you must either specify a file containing account information, or type or paste in the account

information to the Accounts Text area.

Select the Show additional import options check box to display the following advanced import options:

lCharacter Set: ClearPass Guest uses the UTF-8 character set encoding internally to store visitor account

information. If your accounts file is not encoded in UTF-8, the import may fail or produce unexpected results if

non-ASCII characters are used. To avoid this, you should specify what character set encoding you are using.

lImport format: The format of the accounts file is automatically detected. You may specify a different encoding

type if automatic detection is not suitable for your data. The Import Format drop-down list includes the

following options:

nAutomatically detect format (This default option recognizes guest accounts exported from ClearPass Policy

Manager in XML format)

nXML

nComma separated values

nTab separated values

nPipe (|) separated values

nColon (:) separated values

nSemicolon (;) separated values

lSelect the Force first row as header row check box if your data contains a header row that specifies the field

names. This option is only required if the header row is not automatically detected.

Click Next Step to upload the account data.

In step 2 of 3, ClearPass Guest determines the format of the uploaded account data and matches the appropriate

fields are m to the data. The first few records in the data will be displayed, together with any automatically detected

field names.

In this example, the following data was used:

username,visitor_name,password,expire_time

demo005,Demo five,secret005,2011-06-10 09:00

demo006,Demo six,secret006,2011-06-11 10:00

demo007,Demo seven,secret007,2011-06-12 11:00

demo008,Demo eight,secret008,2011-06-13 12:00

demo009,Demo nine,secret009,2011-06-13 12:00

demo010,Demo ten,secret010,2011-06-13 12:00

demo011,Demo eleven,secret011,2011-06-13 12:00

Because this data includes a header row that contains field names, the corresponding fields have been automatically

detected in the data:

Use the Match Fields form to identify which guest account fields are present in the imported data. You can also

specify the values to be used for fields that are not present in the data.

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Importing Guest Accounts

|41

42 | Importing Guest Accounts Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

To complete the Match Fields form, make a selection from each of the drop-down lists. Choose a column name to

use the values from that column when importing guest accounts, or select one of the other available options to use a

fixed value for each imported guest account.

Click the Next Step button to preview the final result. Import Step 3 of 3, the Import Accounts form, opens and

shows a preview of the import operation. The values of each guest account field are determined, and any conflicts

with existing user accounts are shown.

The icon displayed for each user account indicates if it is a new entry ( ) or if an existing user account will be

updated ( ).

By default, this form shows ten entries per page. To view additional entries, click the arrow button at the bottom of

the form to display the next page, or click the 10 rows per page drop-down list at the bottom of the form and select

the number of entries that should appear on each page.

Click the check box by the account entries you want to create, or click one of the following options to select the

desired accounts:

lClick the ThisPage link to select all entries on the current page.

lClick the All link to select all entries on all pages

lClick the None link to deselect all entries

lClick the New link to select all new entries

lClick the Existing link to select all existing user accounts in the list.

Click the Create Accounts button to finish the import process. The selected items will be created or updated.

You can then print new guest account receipts or download a list of the guest accounts. See "Creating Multiple

Guest Account Receipts " on page 31 in this chapter for more information.

Exporting Guest Account Information

Guest account information may be exported to a file in one of several different formats.

Click the appropriate command link to save a list of all guest accounts in comma-separated values (CSV), tab-

separated values (TSV), or XML format.

The Export Accounts view (guest_export) may be customized by adding new fields, or by modifying or removing the

existing fields. See "Customizing Self-Provisioned Access " on page 171 for details about this customization process.

About CSV and TSV Exports

In CSV and TSV format, the following default fields are included in the export:

lNumber – Sequential number of the guest account in the exported data

lUser ID – Numeric user ID of the guest account

lUsername – Username for the guest account

lRole – Role for the guest account

lActivation – Date and time at which the guest account will be activated, or “N/A” if there is no activation time

lExpiration – Date and time at which the guest account will expire, or “N/A” if there is no expiration time

lLifetime – The guest account’s lifetime in minutes after login, or 0 if the account lifetime is not set

lExpire Action – Number specifying the action to take when the guest account expires (0 through 4)

About XML Exports

The default XML format consists of a <GuestUsers> element containing a <GuestUser> element for each

exported guest account. The numeric ID of the guest account is provided as the “id” attribute of the <GuestUser>

element. This format is compatible with the ClearPass Policy Manager XML format for guest users.

The values for both standard and custom fields for guest accounts are exported as the contents of an XML tag, where

the tag has the same name as the guest account field.

An example XML export is given below:

<?xml version="1.0" encoding="UTF-8" standalone="true"?>

<GuestUser guestType="USER" enabled="true" sponsorName="55480025"

expiryTime="2012-12-04 13:39:25" startTime="1969-12-31 16:00:00"

password="08654361" name="55480025">

<GuestUserTags tagValue="Hotspot Services self-provisioned guest account

Source IP: 10.11.10.254 MAC: unknown Plan: Free Access x 1 Transaction

Amount: $0.00 Invoice Number: P-15 Transaction ID: " tagName="notes"/>

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Exporting Guest Account Information

|43

44 | MAC Authentication in ClearPass Guest Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

</GuestUser>

MAC Authentication in ClearPass Guest

ClearPass Guest supports a number of options for MAC Authentication and the ability to authenticate devices.

The advanced features described in this section generally require a WLAN capable of MAC authentication with

captive portal fallback. Please refer to your WLAN documentation for setting up the controller appropriately.

To verify that you have the most recent MAC Authentication Plugin installed and enabled before you configure

these advanced features, go to Administration > Plugin Manager > List Available Plugins. For information on

plugin management, see "Plugin Manager " on page 223.

MAC Address Formats

Different vendors format the client MAC address in different ways—for example:

l112233AABBCC

l11:22:33:aa:bb:cc

l11-22-33-AA-BB-CC

ClearPass Guest supports adjusting the expected format of a MAC address. To configure formatting of separators

and case in the address, as well as user detection and device filtering for views, go to Administration > Plugin

Manager > Manage Plugins and click the Configuration link for the MAC Authentication plugin. The MAC

Authentication Configuration page opens.

Figure 7: MAC Authentication Plugin—Configuration

On the controller, the fields look as follows:

Figure 8: MAC Authentication Profile

Managing Devices

To view the list of current MAC devices, go to Guest > List Devices.

The Guest Manager Devices page opens.

All devices created by one of methods described in the following section are listed. Options on the form let you

change a device’s account expiration date; remove, activate, or edit the device; view active sessions or details for the

device; or print details, receipts, confirmations, or other information.

The MAC Address,Role,State,Activation, and Expiration columns display information about the device accounts

that have been created:

lThe value in the Expiration column is colored red if the device account will expire within the next 24 hours. The

expiration time is additionally highlighted in boldface if the device account will expire within the next hour.

lIn addition, icons in the MAC Address column indicate the device account’s activation status:

n—Device account is active

n—Device account was created but is not activated yet

n—Device account was disabled by Administrator

n—Device account has expired

n—Device account was deleted

You can use the Filter field to narrow the search parameters. You may enter a simple substring to match a portion of

any fields that are configured for search, and you can include the following operators:

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Managing Devices | 45

46 | Changing a Device’s Expiration Date DellNetworking W-ClearPass Guest 6.0 | Deployment Guide

Operator Meaning Additional Information

= is equal to

You may search for multiple values when using the equality

(=) or inequality !=) operators. To specify multiple values, list

them separated by the pipe character ( | ).

For example, specifying the filter "role_id=2|3, custom_

field=Value" restricts the accounts displayed to those with

role IDs 2 and 3 (Guest and Employee), and with the field

named "custom_field" set to "Value".

!= is not equal to

> is greater than

>= is greater than or equal to

< is less than

<= is less than or equal to

~ matches the regular expression

!~ does not match the regular expression

Table 9:

Operators supported in filters

To restore the default view, click the Clear Filter link.

Use the paging control at the bottom of the list to jump forwards or backwards by one page, or to the first or last

page of the list. You can also click an individual page number to jump directly to that page.

To select a device, click the device you want to work with.

Changing a Device’s Expiration Date

To change a device’s expiration date, click the device’s row in the Guest Manager Devices list, then click its Change

expiration link. The row expands to include the Change Expiration form.

1. In the Account Expiration row, choose one of the options in the drop-down list to set an expiration date:

lIf you choose Account expires after, the Expires After row is added to the form. Choose an interval of hours,

days, or weeks from the drop-down list.

lIf you choose Account Expires at a specified time, the Expiration Time row is added to the form. Click the

button to open the calendar picker. In the calendar, use the arrows to select the year and month, click the

numbers in the Time fields to increment the hours and minutes, then click a day to select the date.

2. If you choose any option other than “will not expire” or “now” in the Account Expiration field, the Expire

Action row is added to the table. Use the drop-down list in this row to specify one of the following actions:

delete, delete and log out, disable, or disable and log out.

3. Click Update Account to commit your changes.

Disabling and Deleting Devices

To remove a device’s account by disabling or deleting it, click the device’s row in the Guest Manager Devices list,

then click its Remove link. The row expands to include the Remove Account form.

You may choose to either disable or delete the account. If you disable it, it remains in the device list and you may

activate it again later. If you delete the account, it is removed from the list permanently.

Activating a Device

To activate a disabled device’s account, click the device’s row in the Guest Manager Devices list, then click its

Activate link. The row expands to include the Enable Guest Account form.

1. In the Activate Account row, choose one of the options in the drop-down list to specify when to activate the

account. You may choose an interval, or you may choose to specify a time.

2. If you choose Activate at specified time, the Activation Time row is added to the form. Click the button to

open the calendar picker. In the calendar, use the arrows to select the year and month, click the numbers in the

Time fields to increment the hours and minutes, then click a day to select the date.

3. Click Enable Account to commit your changes.

Editing a Device

To edit a device’s account, click the device’s row in the Guest Manager Devices list, then click its Edit link. The row

expands to include the Edit MAC form.

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Disabling and Deleting Devices | 47

48 | Editing a Device Dell Networking W-ClearPass Guest 6.0 | Deployment Guide

1. You can change the device’s address in the MAC Address row.

If you need to modify the configuration for expected separator format or case, go to Administration > Plugin

Manager > Manage Plugins and click the Configuration link for the MAC Authentication plugin.

2. If you need to change the activation time, choose one of the options in the Account Activation drop-down list.

You may choose to activate the account immediately, at a preset interval of hours or days, or at a specified time.

lIf you choose Activate at a specified time, the Activation Time row is added to the form. Click the button

to open the calendar picker. In the calendar, use the arrows to select the year and month, click the numbers in

the Time fields to increment the hours and minutes, then click a day to select the date.

3. If you need to change the expiration time, choose one of the options in the Account Expiration drop-down list.

You may terminate the account immediately, at a preset interval of hours or days, or at a specified time.

lIf you choose any time in the future, the Expire Action row is added to the form. Use this drop-down list to

indicate the expiration action for the account—either delete, delete and log out, disable, or disable and log

out. The action will be applied at the time set in the Account Expiration row.

lIf you choose Account expires after, the Expires After row is added to the form. Choose an interval of hours,

days, or weeks from the drop-down list. The maximum is two weeks.

lIf you choose Account Expires at a specified time, the Expiration Time row is added to the form. Click the

button to open the calendar picker. In the calendar, use the arrows to select the year and month, click the

numbers in the Time fields to increment the hours and minutes, then click a day to select the date.

4. To change the maximum usage allowed for the account, choose an option from the Total Allowed Usage drop-

down list. You may set the total usage to one or two hours, add one or two hours to the existing setting, or

subtract one or two hours from the existing setting.

5. You can use the Account Role drop-down list to change the visitor’s assigned role.

6. (Optional) In the Notes row, you may enter additional information.

7. To commit your changes, click Update MAC.

Viewing Current Sessions for a Device

To view any sessions that are currently active for a device, click the Sessions link in the device’s row on the Guest

Manager Devices form. The Active Sessions list opens. For more information, see "Active Sessions Management " on

page 59.

Viewing and Printing Device Details

To print details, receipts, confirmations, or other information for a device, click the device’s row in the Guest

Manager Devices list, then click its Print link. The row expands to include the Account Details form and a drop-

down list of information that can be printed for the device.

Choosing an option in the Open print window using template drop-down list opens a print preview window and

the printer dialog. Options include account details, receipts in various formats, a session expiration alert, and a

sponsorship confirmation notice.

MAC Creation Modes

MAC device accounts may be created in three ways:

lManually in ClearPass Guest using the Create Device form

lDuring guest self-registration by a mac parameter passed in the redirect URL, if the process is configured to

create a MAC device account

lDuring guest self-registration by a mac parameter passed in the redirect URL, creating a parallel account paired

with the visitor account

Dell Networking W-ClearPass Guest 6.0 | Deployment Guide Viewing Current Sessions for a Device | 49

50 | Creating Devices Manually in ClearPass Guest DellNetworking W-ClearPass Guest 6.0 | Deployment Guide

Creating Devices Manually in ClearPass Guest

If you have the MAC address, you can create a new device manually. You do this on the New MAC Authentication

form.

To create a new device:

1. Go to Guest > List Devices and click the Create link, or you can go to the Guest navigation page and click the

Create Device command.

The New MAC Authentication page opens.

2. In the Sponsor’s Name row, enter the name of the person sponsoring the visitor account.

3. Enter the name for the device in the Device Name row.

4. Enter the address in the MAC Address row.

If you need to modify the configuration for expected separator format or case, go to Administration > Plugin

Manager > Manage Plugins and click the Configuration link for the MAC Authentication Plugin.

5. Choose one of the options in the Account Activation drop-down list. You may choose to activate the account

immediately, at a preset interval of hours or days, at a specified time, or leave the account disabled.

lIf you choose Activate at a specified time, the Activation Time row is added to the form. Click the button

to open the calendar picker. In the calendar, use the arrows to select the year and month, click the numbers in

the Time fields to increment the hours and minutes, then click a day to select the date.

6. To set the account’s expiration time, choose one of the options in the Account Expiration drop-down list. You

may set the account to never expire, or to expire at a preset interval of hours or days, or at a specified time.