Dell PowerConnect W Clearpass 100 Software Integration Manual

amigopod 1. Ensure that you have the latest version of amigopod software by navigating to the plugin manager from the administrator menu. Click on check for updates and install any new updates 2. Navigate to Radius services, NAS devices and add the IP address of your colubris gateway and enter a shared secret. Make sure after you save that you click to restart the radius server In this example we will use the following Ip addresses amigopod: 10.1.1.204 colubris: 10.1.1.222 3. Click on user roles and delete all of the existing roles (guest, contractor, employee)

access policies. In this example we will create a single guest policy which allows http and SSL traffic Note that you will have to add the attribute values one by one from the following dictionaries Standard Radius Dictionary: Attribute Name Value Service-Type Administrative-user Colubris dictionary: Attribute Name Value Colubris-AVPair default-user-acct-interim-update=600 Colubris-AVPair default-user-idle-timeout=3600 Colubris-AVPair access-list=guest,ACCEPT,tcp,all,80 Colubris-AVPair access-list=guest,ACCEPT,tcp,all,443 This defines a policy called 'guest' which allows TCP port 443 and 80 traffic to all destinations. If you want to restrict or add any more firewall policies, simply edit using the following syntax access-list=guest,action,protocol,address,port For example, to add a new firewall rule in the guest role to allow telnet access to the server 10.3.2.1 access-list=guest,ACCEPT,tcp,10.3.2.1,23 If you want to have different types of roles eg. contractor, simply follow the syntax but use the name eg. 'contractor' instead of guest and add the required firewall rules 5. Now you need to create the role for 'guest' (and any other roles you have defined in step 4. Simply create a new role, give it a name eg. guest and define the attribute as per the screenshot below. Colubris dictionary: Attribute Name Value Colubris-AVPair use-access-list=guest

was created earlier Note that you should change the password and set the exiration time to 'Never' by editing the account once you have created it. This can be done by clicking on 'List Accounts' from guest manager and editing the [email protected] account.

IP address of the amigopod and the same shared secret that you used when defining the NAS earlier. Set the authentication method to 'CHAP' and leave all other settings as default 2. Under 'Public Access->Attributes' select the amigopod radius profile you created, and put in the username and password for the [email protected] account you created in amigopod. Make sure you tick the 'Accounting' checkbox 3. 3. We now need to enable captive portal authentication under the VSC donfiguration from the left hand menu. Clickl on the VSC group (in this example the default Colubris Network). Scroll down to the HTML based user logins and check Radius Authentication (and select amigopod radius) and select Radius Accounting (and select amigopod radius)

You should now be able to log in through the colubris captive portal, enter your username and password and be authenticated into a guest role that only allows HTTP and SSL traffic

1. amigopod can be configured to host the captive portal, providing a consistant look and feel utilising available amigopod skins. This is done very simply on colubris by configuring additional attributes In this example, the amigopod IP address is 10.1.1.204 and the number 1 corresponds to web login page number 1 to be used on amigopod (use 1 for the default amigopod skin) Attribute Name Value (format = http://IP_ADDRESS/weblogin.php/# LOGIN-PAGE http://10.1.1.204/weblogin.php/1 LOGIN-URL http://10.1.1.204/weblogin.php/1 You can add additional attributes for redirecting of information and error pages 2. On amigopod, browse to Radius Serices – Web Logins and create a new Web Login with the following details. Make sure to use the IP address of your Colubris controller

the basic look and feel. Additionally yu can cofigure a custom header, footer and custom visitor login messages