Example 4: Private Psks - Black Box LWN602A User Manual

4. Close the Web page and open a new browser window.
The browser successfully opens to its home page, and you can visit other sites on the public network. If there is any Web server
on the local network, try to browse to it and you will find that it is not possible. Similarly, if you try to ping the default gateway
or a remote website (www.blackbox.com, for example), you will find that you do not receive any responses because the fire-
wall does not permit ICMP traffic to either the internal or external network. On the other hand, if there is a remote IKE peer to
which you can build a VPN tunnel, you will find that you will be able to do so.

9.4 Example 4: Private PSKs

Private PSKs are unique preshared keys created for individual users on the same SSID.3 They offer unique keys per user and user
profile flexibility (similar to 802.1X) with the simplicity of preshared keys. For this example, the steps for generating, applying, and
distributing private PSK user data are as follows:
1. Define two user profiles.
2. Create two private PSK user groups. Each group includes an attribute that links it to one of the user profiles.
3. Import manually created private PSK users and assign them to one of the two private PSK user groups.
4. Create an SSID that references the private PSK groups and user profiles to which the PSK groups link.
5. Reference the SSID in a WLAN policy.
6. Push the configuration and user database to managed SmartPath APs.
7. E-mail private PSK user data to individuals to use when connecting to the network through the SSID.
NOTE: Before you can e-mail the private PSK user data, you must configure the SMTP server and From Email settings in the
Update Email Service Settings section on the Home > Administration > SmartPath EMS Services page.
An overview of the process is shown in Figure 9-17.
SmartPath EMS Admin
* When defining private PSK users,
indicate the SSID you want them
to use in the "Description" field.
1
Import private PSK
users in a CSV-
formatted file.*
E-mail private PSK user accounts
directly to users from SmartPath EMS.
Figure 9-17. Private PSK configuration, application, distribution, and usage.
724-746-5500 | blackbox.com
Chapter 9: Common Configuration Examples
SmartPath EMS
Database
Update private PSK user
accounts in the SmartPath AP
database and update the
configurationwith a private
PSK SSID.
4
While forming an association with the
specified SSID, users enter their PSK
when prompted for a network key.
3
5
Users are authenticated.
2
SmartPath AP
Database
Private PSK
User
Page 119