User Profiles - Black Box SmartPath LWN602A User Manual

SmartPath AP Private PSK Server: Choose the SmartPath AP that you want to use as the private PSK server from the drop-
down list. This is the SmartPath AP that will store all the private PSK users and act as a server that the other SmartPath APs will
contact when checking and requesting a binding of a user-submitted private PSK to the MAC address of the user's client.
User profiles assigned after successful private PSK authentication: In the Available User Profiles column, select an entry
whose attribute number matches the attribute number of the selected private PSK user group, and then click the right arrow ( > )
to move it to the Selected User Profiles column.

9.4.2 User Profiles

Unlike a traditional PSK SSID, a private PSK SSID can support multiple user profiles. For this example, you create two user profiles,
one for employees with full network access and another for contractors with limited access.
To define a user profile for employees, click Configuration > User Profiles > New, enter the following, leave the other settings as
they are, and then click Save:
Name: Employees(30)
The number 30 is included as part of the user profile name so that you can easily know its attribute.
Attribute Number: 30
The SmartPath AP uses this attribute number to link the user profile to a user group with the same attribute. You can use
any number between 1 and 4095.
Default VLAN: 1
Description: Corporate employees
To define a user profile for contractors with a firewall policy that allows basic network protocols to the public network while
blocking access to the internal network, click Configuration > User Profiles > New, enter the following, leave the other settings as
they are, and then click Save:
Name: Contractors(35)
Attribute Number: 35
Default VLAN: 1
Description: short-term contractors
Expand Firewalls, and enter the following in the IP Firewall Policy section:
From-Access: Click the New icon to open the IP Firewall Policy dialog box, and then enter the following:
Policy Name: contractors-outgoing-IP-policy
Description: Apply to contractor user profiles
Policy Rules:
To add rules permitting only DHCP, DNS, HTTP, and HTTPS to the public network while denying any type of
traffic to the internal network, enter the following (use CTRL-click or SHIFT-click to select multiple services):
(Click...)
New
New
New
New
Table 9-3. CTRL-click or SHIFT-click to select multiple services.
Source Destination*
[-any] [-any-]
[-any-] 10.0.0.0/8
[-any-] 172.16.0.0/12
[-any-] 192.168.0.0/16
[-any-] [-any-]
724-746-5500 | blackbox.com
Chapter 9: Common Configuration Examples
Service Action
DHCP-Server, DNS Permit
[-any-] Deny
[-any-] Deny
[-any-] Deny
HTTP, HTTPS Permit
Logging* (Click)
Off Apply
Dropped Packets Apply
Dropped Packets Click "Apply."
Dropped Packets Click "Apply."
Both Apply
Page 141