Black Box LWN602A User Manual page 112

Chapter 9: Common Configuration Examples
• Firewall Policy—To maintain security, restrict visitors to accessing just the public network.
• User Profile—Apply the QoS rate limiting and firewall policy to the user profile that the SmartPath AP applies to traffic from
successfully registered users.
• SSID—Configure an SSID that secures wireless traffic with a preshared key and permits access to the public network only
through the captive Web portal.
• WLAN Policy—Add the SSID to a WLAN policy.
• Files and Configuration Upload—Push the captive web portal files and the WLAN policy to the managed SmartPath APs.
Guests use a preshared key to secure wireless traffic between their wireless clients and SmartPath APs. After forming a secure
association with a SmartPath AP, the SmartPath AP intercepts all outbound traffic—except DHCP, DNS, and ICMP traffic—and
presents them with a self-registration page. The guests must complete a form and accept a network usage policy before being
allowed to access the public network. Registered visitors' activity can be tracked and stored in historical logs on a syslog server for
security and compliance auditing.
Captive Web Portal
To create a captive Web portal requiring users to self-register to gain network access, click Configuration > Advanced
Configuration > Authentication > Captive Web Portals > New, enter the following, leave all the other values at their default
settings, and then click Save:
Name: CWP-guest1
Registration Type: Self-registration
Description: Captive Web portal for guest registration
Leaving everything else at its default setting creates a captive Web portal configuration that uses all the predefined Web files and
the default network settings. The DHCP, DNS, and ICMP traffic from the clients of unregistered users is allowed to pass through
the SmartPath AP to external servers.
QoS Rate Limiting
To allot guests with enough bandwidth to satisfy basic network access but not enough to interfere with employee traffic, click
Configuration > Advanced Configuration > QoS Policies > Rate Control & Queuing > New, enter the following, and then click
Save:
Name: QoS-Guests
Per User Rate Limit: 2000 kbps for 802.11a/b/g; 2000 kbps for 802.11n
This is the maximum amount of bandwidth that a single user belonging to this profile can use. It is far less than the bandwidth
you can reserve for other users such as employees, but it should be sufficient for basic Web access for visitors.
Description: QoS per guest
Per User Queue Management: Enter the following items in bold, and leave all other settings unchanged:
Page 112
724-746-5500 | blackbox.com