Extreme Networks Summit WM User Manual page 158

WM Access Domain Services configuration
To create an SSID for Captive Portal WM-AD:
1 From the main menu, click WM Access Domain Configuration. The WM Access Domain
Configuration page is displayed.
2 In the left pane WM Access Domains list, click the WM-AD you want to create an SSID for. The
Topology tab is displayed.
3 From the Assignment by drop-down list, click SSID.
Defining session timeout parameters
The Summit WM Controller allows a client to associate to the AP and exist on the network without
having authentication. Every associated user has a user session tracked by the Summit WM Controller
from the time of association with the AP. Users can be temporarily (or longer for SSID assigned WM-
ADs) be in the non-authenticated state. Pre timeout is the maximum amount of time allowed to elapse
from the last time any traffic was received by the system for an un-authenticated user. For example, a
user may have disconnected from the system (shutdown the device, moved out of range, etc.). A pre
timeout expires and cleans up the session.
The post timeout is the max amount of time that is allowed to elapse from the last time any traffic was
received for an authenticated user. For example, a user may have disconnected from the system and is
no longer be connected. A post timeout expires and cleans up the session.
A client that exceeds either the pre or post timeout value will be forced to disassociate.
The session timer defines the maximum amount of time a session is allowed to be connected to the
system. The session timer is particularly useful in pay-per-use models. When the lifetime of the session
reaches the defined limit, the session is expired and cleaned up. A user would have to re-authenticate
with the system to continue to receive network services.
NOTE
The WM-AD timeout parameters define the default timers applicable to session management within the WM-AD.
However, RADIUS authentication (access-accept) may return specific timers applicable to the particular user. A
RADIUS returned value overwrites the WM-AD default values for the specific user.
In addition, a zero (0) value for any of the timers indicates a non-applicable value. Therefor, the corresponding timer
is not enforced.
To define the session timeout parameters for a WM-AD:
1 From the main menu, click WM Access Domain Configuration. The WM Access Domain
Configuration page is displayed.
2 In the left pane WM Access Domains list, click the WM-AD you want to define the session timeout
parameters for. The Topology tab is displayed.
3 In the Idle (pre) box, type the number of minutes that a client is allowed to be idle on the WM-AD
before authentication.
4 In the Idle (post) box, type the number of minutes that a client is allowed to be idle on the WM-AD
after authentication.
5 In the Session box, type the maximum time limit of a session. If you do not provide a Session value,
there is no time limit.
158
Summit WM User Guide, Software Version 5.3