Deployment Process; Security Policy Considerations; Operational Concerns; Network Provisioning - Aruba Networks PowerConnect W Clearpass 100 Software Deployment Manual

Table 3 Common Terms (Continued)
Web Login/NAS Login

Deployment Process

As part of your preparations for deploying a visitor management solution, you should consider the following
areas:
Management decisions about security policy

Decisions about the day-to-day operation of visitor management

Technical decisions related to network provisioning


Security Policy Considerations

To ensure that your network remains secure, decisions have to be made regarding guest access:
Do you wish to segregate guest access? Do you want a different VLAN, or different physical network

infrastructure to be used by your guests?
What resources are you going to make available to guests (for example, type of network access;

permitted times of day; bandwidth allocation)?
Will guest access be separated into different roles? If so, what roles are needed?

How will you prioritize traffic on the network to differentiate quality of service for guest accounts and

non-guest accounts?
What will be the password format for guest accounts? Will you be changing this format on a regular

basis?
What requirements will you place on the shared secret, between NAS and the RADIUS server to ensure

network security is not compromised?
What IP address ranges will operators be using to access the server?

Should HTTPS be required in order to access the visitor management server?


Operational Concerns

When deploying a visitor management solution, you should consider these operational concerns:
Who is going to be responsible for managing guest accounts? What privileges will the guest account

manager have? Will this person only create guest accounts or will this person also be permitted access
to reports?
Do you want guests to be able to self-provision their own network access? What settings should be

applied to self-provisioned visitor accounts?
How will operator logins be provisioned? Should operators be authenticated against an LDAP server?

Who will manage reporting of guest access? What are the reports of interest? Are any custom reports

needed?

Network Provisioning

Deploying ClearPass Guest requires provisioning the following:
Physical location – rack space, power and cooling requirements; or deployment using virtualization

Network connectivity – VLAN selection, IP address and hostname

Security infrastructure – SSL certificate

30 | Management Overview
Login page displayed to a guest user.
ClearPass Guest 3.9 | Deployment Guide