WFS709TP Setup Manual
Page 10
... Virtual Router Redundancy Protocol 11-1 Redundancy Configuration 11-1 Configuring Local WFS709TP Redundancy 11-2 Master WFS709TP Redundancy 11-4 Master-Local WFS709TP Redundancy 11-5 Chapter 12. WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Authentication Terminated on WFS709TP 7-3 Configuring 802.1x Authentication 7-4 802.1x Authentication Page 7-5 Advanced Configuration Options for Captive Portal 8-5 Changing the Protocol to a Multi-Switch Environment 10-1 Configuring Local...
... Virtual Router Redundancy Protocol 11-1 Redundancy Configuration 11-1 Configuring Local WFS709TP Redundancy 11-2 Master WFS709TP Redundancy 11-4 Master-Local WFS709TP Redundancy 11-5 Chapter 12. WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Authentication Terminated on WFS709TP 7-3 Configuring 802.1x Authentication 7-4 802.1x Authentication Page 7-5 Advanced Configuration Options for Captive Portal 8-5 Changing the Protocol to a Multi-Switch Environment 10-1 Configuring Local...
WFS709TP Setup Manual
Page 12
Internal Captive Portal Creating a New Internal Web Page C-1 Basic HTML Example C-3 Installing a New Captive Portal Page C-4 Displaying Authentication Error Message C-4 Language Customization C-6 Customizing the Welcome Page C-12 Customizing the Pop-Up Box C-14 Customizing the Logged Out Box C-15 Appendix D. Related Documents Index 1 xii Contents v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Appendix C.
Internal Captive Portal Creating a New Internal Web Page C-1 Basic HTML Example C-3 Installing a New Captive Portal Page C-4 Displaying Authentication Error Message C-4 Language Customization C-6 Customizing the Welcome Page C-12 Customizing the Pop-Up Box C-14 Customizing the Logged Out Box C-15 Appendix D. Related Documents Index 1 xii Contents v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Hardware Installation Guide Appendix C.
WFS709TP Setup Manual
Page 30
... WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The client determines which means that user. Authentication Authentication provides a way to identify a user and provide appropriate access to associate with an authentication server on the WFS709TP is encrypted using a web-based portal....it receives is immediately sent through a GRE tunnel to less secure methods such as 802.1x and captive portal to the WFS709TP. Captive portal authentication is an open authentication framework, allowing multiple authentication protocols to operate within the framework. 802.1x...
... WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The client determines which means that user. Authentication Authentication provides a way to identify a user and provide appropriate access to associate with an authentication server on the WFS709TP is encrypted using a web-based portal....it receives is immediately sent through a GRE tunnel to less secure methods such as 802.1x and captive portal to the WFS709TP. Captive portal authentication is an open authentication framework, allowing multiple authentication protocols to operate within the framework. 802.1x...
WFS709TP Setup Manual
Page 34
...name. This tool allows you to view the status of the WFS709TP This tool allows you to upgrade the image file, load licenses, copy files to/from flash, configure and reboot APs, and configure the captive portal feature This tool enables you to view events in the browser...allows you to design the WLAN deployment for technical support, and view AP configuration and statistics. Click on the local WFS709TP, WLANs, and custom logs. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • When you place the cursor over them. This tool allows you to select the tool.
...name. This tool allows you to view the status of the WFS709TP This tool allows you to upgrade the image file, load licenses, copy files to/from flash, configure and reboot APs, and configure the captive portal feature This tool enables you to view events in the browser...allows you to design the WLAN deployment for technical support, and view AP configuration and statistics. Click on the local WFS709TP, WLANs, and custom logs. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual • When you place the cursor over them. This tool allows you to select the tool.
WFS709TP Setup Manual
Page 98
...Protocol (TKIP) to dynamically change keys and RC4 stream cipher to the internal database on the WFS709TP. WPA2 WPA2 implements the full IEEE 802.11i standard. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Determine the Authentication Method A user must enter a passphrase from 8-63...to access the network. MAC Allows the media access control (MAC) address of keys that are dynamically generated on a per-user basic (as WPA2-Personal.) Captive Portal Captive Portal allows users to the internal database on the WFS709TP. WPA in pre-shared key (PSK) mode (WPA...
...Protocol (TKIP) to dynamically change keys and RC4 stream cipher to the internal database on the WFS709TP. WPA2 WPA2 implements the full IEEE 802.11i standard. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Determine the Authentication Method A user must enter a passphrase from 8-63...to access the network. MAC Allows the media access control (MAC) address of keys that are dynamically generated on a per-user basic (as WPA2-Personal.) Captive Portal Captive Portal allows users to the internal database on the WFS709TP. WPA in pre-shared key (PSK) mode (WPA...
WFS709TP Setup Manual
Page 99
...wireless user, you can configure for the WLAN, see "Encryption" on page 7-4. Table 5-2. Authentication Server If an external authentication server, such as a RADIUS server, will be used to support this authentication. Encryption Options by Authentication Types Authentication Type 802,1x WPA WPA-PSK WPA2 WPA-PSK2 Captive Portal... must also configure the server to allow communication with the WFS709TP. The administrator must configure user entries in your WLAN. Table 5-3. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The Layer 2 encryption depends upon ...
...wireless user, you can configure for the WLAN, see "Encryption" on page 7-4. Table 5-2. Authentication Server If an external authentication server, such as a RADIUS server, will be used to support this authentication. Encryption Options by Authentication Types Authentication Type 802,1x WPA WPA-PSK WPA2 WPA-PSK2 Captive Portal... must also configure the server to allow communication with the WFS709TP. The administrator must configure user entries in your WLAN. Table 5-3. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The Layer 2 encryption depends upon ...
WFS709TP Setup Manual
Page 100
... type • "Advanced" authentication features such as Captive Portal, VPN, and MAC authentication, in addition to Layer 2 authentication • Authentication server: either RADIUS or the WFS709TP's internal database Note: If the authentication server is linked to a VLAN on attributes returned by the server during authentication. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual ** Only when the AAA...
... type • "Advanced" authentication features such as Captive Portal, VPN, and MAC authentication, in addition to Layer 2 authentication • Authentication server: either RADIUS or the WFS709TP's internal database Note: If the authentication server is linked to a VLAN on attributes returned by the server during authentication. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual ** Only when the AAA...
WFS709TP Setup Manual
Page 102
... portal. The default is None, WPA-PSK, or WPA2-PSK. Table 5-4. Either the internal database or an external RADIUS server. WLAN Basic Configuration Parameters Parameter Network Section: Network Name (SSID) Radio Type 802.11 Security: Network Authentication Encryption Advanced Authentication Auth Server Type Keys Definition A name that uniquely identifies the WLAN. WFS709TP ProSafe Smart Wireless...
... portal. The default is None, WPA-PSK, or WPA2-PSK. Table 5-4. Either the internal database or an external RADIUS server. WLAN Basic Configuration Parameters Parameter Network Section: Network Name (SSID) Radio Type 802.11 Security: Network Authentication Encryption Advanced Authentication Auth Server Type Keys Definition A name that uniquely identifies the WLAN. WFS709TP ProSafe Smart Wireless...
WFS709TP Setup Manual
Page 133
... can use policy, or entering a user ID and password that requires action on the WFS709TP. This chapter describes the following topics: • "Overview of authentication supported by the WFS709TP ProSafe Smart Wireless Switch is required. Captive Portal is most often used in "Personalizing the Captive Portal Page" on page 8-3 • "Configuring the AAA Server for guest access, access to...
... can use policy, or entering a user ID and password that requires action on the WFS709TP. This chapter describes the following topics: • "Overview of authentication supported by the WFS709TP ProSafe Smart Wireless Switch is required. Captive Portal is most often used in "Personalizing the Captive Portal Page" on page 8-3 • "Configuring the AAA Server for guest access, access to...
WFS709TP Setup Manual
Page 134
... allowed only DNS, DHCP, and HTTP or HTTPS connections to the network. In the base operating system, you enable Captive Portal on a per -ESSID basis. • If you use Captive Portal may see a Security Alert message when logging in (Figure 8-1). WFS709TP ProSafe Smart Wireless Switch Software Administration Manual If an appropriate server certificate is not installed in the...
... allowed only DNS, DHCP, and HTTP or HTTPS connections to the network. In the base operating system, you enable Captive Portal on a per -ESSID basis. • If you use Captive Portal may see a Security Alert message when logging in (Figure 8-1). WFS709TP ProSafe Smart Wireless Switch Software Administration Manual If an appropriate server certificate is not installed in the...
WFS709TP Setup Manual
Page 135
... primary server. Navigating to the Configuration > Basic > WLAN page allows you need to specify the authentication server that will validate the username and password for Captive Portal users: a. Click Add under Authentication Servers. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The easiest way to configure an ESSID for either Registration Web Page or...
... primary server. Navigating to the Configuration > Basic > WLAN page allows you need to specify the authentication server that will validate the username and password for Captive Portal users: a. Click Add under Authentication Servers. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual The easiest way to configure an ESSID for either Registration Web Page or...
WFS709TP Setup Manual
Page 136
... used on re-direction to any URL. /auth /welcome.html 8-4 Configuring the Captive Portal v1.0, June 2007 If https you select HTTP, modify the captive portal policy to 0, the welcome page displays until the station reloads. If set to the Captive Portal page. Table 8-1. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 8-2 Table 8-1 describes the configuration options on this...
... used on re-direction to any URL. /auth /welcome.html 8-4 Configuring the Captive Portal v1.0, June 2007 If https you select HTTP, modify the captive portal policy to 0, the welcome page displays until the station reloads. If set to the Captive Portal page. Table 8-1. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 8-2 Table 8-1 describes the configuration options on this...
WFS709TP Setup Manual
Page 137
... always the primary server 4. (Optional) To change the list order, use HTTP instead, do the following: Configuring the Captive Portal 8-5 v1.0, June 2007 Servers are listed in conjunction with the CPU Utilization Threshold. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Table 8-1. Specifies the IP address of descending priority. This can be applied. 3. Works in order...
... always the primary server 4. (Optional) To change the list order, use HTTP instead, do the following: Configuring the Captive Portal 8-5 v1.0, June 2007 Servers are listed in conjunction with the CPU Utilization Threshold. WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Table 8-1. Specifies the IP address of descending priority. This can be applied. 3. Works in order...
WFS709TP Setup Manual
Page 138
background field. 8-6 Configuring the Captive Portal v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 1. For Protocol Type, select http and click Apply. Personalizing the Captive Portal Page You can personalize the following elements on the Captive Portal page: • Captive Portal background • Page text • Acceptance Use Policy To personalize the Captive Portal page: 1. Navigate to the Maintenance > Captive Portal > Customize Login page...
background field. 8-6 Configuring the Captive Portal v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 1. For Protocol Type, select http and click Apply. Personalizing the Captive Portal Page You can personalize the following elements on the Captive Portal page: • Captive Portal background • Page text • Acceptance Use Policy To personalize the Captive Portal page: 1. Navigate to the Maintenance > Captive Portal > Customize Login page...
WFS709TP Setup Manual
Page 139
...users. 5. (Optional) Customize the text under the Acceptable Use Policy: a. b. Configuring the Captive Portal 8-7 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 3. (Optional) Customize the captive portal background text. Enter the policy information in the Page Text message box. Set the background color ... Submit on the bottom on the page and then click the View Captive Portal link. To view the changes, click Submit at the bottom on the page. This displays the Captive Portal page as it will be seen by users (Figure 8-5). This text...
...users. 5. (Optional) Customize the text under the Acceptable Use Policy: a. b. Configuring the Captive Portal 8-7 v1.0, June 2007 WFS709TP ProSafe Smart Wireless Switch Software Administration Manual 3. (Optional) Customize the captive portal background text. Enter the policy information in the Page Text message box. Set the background color ... Submit on the bottom on the page and then click the View Captive Portal link. To view the changes, click Submit at the bottom on the page. This displays the Captive Portal page as it will be seen by users (Figure 8-5). This text...
WFS709TP Setup Manual
Page 140
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 8-5 The text you entered appears in a text box when the user clicks the Acceptable Use Policy on the Captive Portal web page. 8-8 Configuring the Captive Portal v1.0, June 2007
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Figure 8-5 The text you entered appears in a text box when the user clicks the Acceptable Use Policy on the Captive Portal web page. 8-8 Configuring the Captive Portal v1.0, June 2007
WFS709TP Setup Manual
Page 181
... 13-19 Installing a Server Certificate Captive Portal and IEEE 802.1x with a custom certificate issued for your PC. 3. NETGEAR strongly recommends that you replace the default server certificate in the WFS709TP with AAA FastConnect require that you install...Captive Portal Functions" on your site or domain by a trusted certificate authority (CA). Note: Certificate installation shuts down web server connections. Click Upload. Click Browse to be in the WFS709TP (see "802.1x Authentication" on page 7-1 and "Overview of the certificate on page 8-1). WFS709TP ProSafe Smart Wireless...
... 13-19 Installing a Server Certificate Captive Portal and IEEE 802.1x with a custom certificate issued for your PC. 3. NETGEAR strongly recommends that you replace the default server certificate in the WFS709TP with AAA FastConnect require that you install...Captive Portal Functions" on your site or domain by a trusted certificate authority (CA). Note: Certificate installation shuts down web server connections. Click Upload. Click Browse to be in the WFS709TP (see "802.1x Authentication" on page 7-1 and "Overview of the certificate on page 8-1). WFS709TP ProSafe Smart Wireless...
WFS709TP Setup Manual
Page 201
..." method is recommended. It includes the following topics: • "Creating a New Internal Web Page" on page C-1 • "Installing a New Captive Portal Page" on page C-4 • "Displaying Authentication Error Message" on page C-4 • "Language Customization" on page C-6 • "Customizing the Welcome...of the WFS709TP ProSafe Smart Wireless Switch and is dependent on page C-15 Creating a New Internal Web Page A custom web page must absolutely or relatively reference https:///auth/index.html/u. This appendix discusses creating and installing a new internal captive portal page and...
..." method is recommended. It includes the following topics: • "Creating a New Internal Web Page" on page C-1 • "Installing a New Captive Portal Page" on page C-4 • "Displaying Authentication Error Message" on page C-4 • "Language Customization" on page C-6 • "Customizing the Welcome...of the WFS709TP ProSafe Smart Wireless Switch and is dependent on page C-15 Creating a New Internal Web Page A custom web page must absolutely or relatively reference https:///auth/index.html/u. This appendix discusses creating and installing a new internal captive portal page and...
WFS709TP Setup Manual
Page 202
The form variables can be input using any form control method available such as INPUT, SELECT, TEXTAREA and BUTTON. Username Minimal: Recommended Options: • accesskey="u" - Sets the keyboard shortcut to 'u'..."" - Ensures no default value FQDN Minimal: C-2 Internal Captive Portal v1.0, June 2007 the size of the input box to cache form inputs. Example HTML code follows. A recommended option for the element is: autocomplete="off" This tells Internet Explorer not to 25 • VALUE="" - WFS709TP ProSafe Smart Wireless Switch Software Administration Manual ...
The form variables can be input using any form control method available such as INPUT, SELECT, TEXTAREA and BUTTON. Username Minimal: Recommended Options: • accesskey="u" - Sets the keyboard shortcut to 'u'..."" - Ensures no default value FQDN Minimal: C-2 Internal Captive Portal v1.0, June 2007 the size of the input box to cache form inputs. Example HTML code follows. A recommended option for the element is: autocomplete="off" This tells Internet Explorer not to 25 • VALUE="" - WFS709TP ProSafe Smart Wireless Switch Software Administration Manual ...
WFS709TP Setup Manual
Page 203
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Recommended Options: None. Internal Captive Portal C-3 v1.0, June 2007 You must also include an input button: Basic HTML Example Username: Password: For a more advanced example, use your browser's View Source function while viewing the default captive portal page.
WFS709TP ProSafe Smart Wireless Switch Software Administration Manual Recommended Options: None. Internal Captive Portal C-3 v1.0, June 2007 You must also include an input button: Basic HTML Example Username: Password: For a more advanced example, use your browser's View Source function while viewing the default captive portal page.