Cisco 2100 Series Configuration Manual page 541

Chapter 10 Managing User Accounts
Perform one of the following:
Step 4
If you want to generate an automatic password for this guest user, check the Generate Password
•
check box. The generated password is entered automatically in the Password and Confirm Password
fields.
• If you want to create a password for this guest user, leave the Generate Password check box
unchecked and enter a password in both the Password and Confirm Password fields.
Note
From the Lifetime drop-down boxes, choose the amount of time (in days, hours, minutes, and seconds)
Step 5
that this guest user account is to remain active. A value of zero (0) for all four fields creates a permanent
account.
Default: 1 day
Range: 5 minutes to 30 days
Note
Note
From the WLAN SSID drop-down box, choose the SSID that will be used by the guest user. The only
Step 6
WLANs that are listed are those for which Layer 3 web authentication has been configured.
Note
In the Description field, enter a description of the guest user account. You can enter up to 32 characters.
Step 7
Click Apply to commit your changes. The new guest user account appears in the list of guest users on
Step 8
the Guest Users List page (see
OL-17037-01
Passwords can contain up to 24 characters and are case sensitive.
The smaller of this value or the session timeout for the guest WLAN, which is the WLAN on
which the guest account is created, takes precedence. For example, if a WLAN session timeout
is due to expire in 30 minutes but the guest account lifetime has 10 minutes remaining, the
account is deleted in 10 minutes upon guest account expiry. Similarly, if the WLAN session
timeout expires before the guest account lifetime, the client experiences a recurring session
timeout that requires reauthentication.
You can change a guest user account with a non-zero lifetime to another lifetime value at any
time while the account is active. However, to make a guest user account permanent using the
controller GUI, you must delete the account and create it again. If desired, you can use the config
netuser lifetime user_name 0 CLI command to make a guest user account permanent without
deleting and recreating it.
Cisco recommends that the system administrator create a specific guest WLAN to prevent any
potential conflicts. If a guest account expires and it has a name conflict with an account on the
RADIUS server and both are on the same WLAN, the users associated with both accounts are
disassociated before the guest account is deleted.
Figure 10-5).
Cisco Wireless LAN Controller Configuration Guide
Creating Guest User Accounts
10-5