Profile Services Configuration And Deployment Considerations; Profile Management Configuration - Motorola WiNG 5 System Reference Manual

5 - 136 WiNG 5 Access Point System Reference Guide

5.3.9.1 Profile Services Configuration and Deployment Considerations


Profile Services Configuration
Before defining a profile's captive portal and DHCP configuration, refer to the following deployment guidelines to
ensure the profile configuration is optimally effective:
• A profile plan should consider the number of wireless clients allowed on the profile's guest (captive portal)
network and the services provided, or if the profile should support guest access at all.
• Profile configurations supporting a captive portal should include firewall policies to ensure logical separation is
provided between guest and internal networks so internal networks and hosts are not reachable from guest
devices.
• DHCP's lack of an authentication mechanism means a DHCP server supported profile cannot check if a client or
user is authorized to use a given user class. This introduces a vulnerability when using user class options. Ensure
a profile using DHCP resources is also provisioned with a strong user authorization and validation configuration.

5.3.10 Profile Management Configuration

The access point has mechanisms to allow/deny management access to the network for separate interfaces and
protocols (HTTP, HTTPS, Telnet, SSH or SNMP). These management access configurations can be applied strategically
to profiles as resource permissions dictate.
Additionally, an administrator can define a profile with unique configuration file and device firmware upgrade
support.
To define a profile's management configuration:
1. Select the
2. Select Devices.
3. Select System Profile
4. Expand the
Configuration tab from the Web UI.
from the options on left-hand side of the UI.
Management menu item and select Settings.