BYOD Logon Help Needed.

[kjadams]

I’m looking for some guidance on the best way forward with regards to our BYOD configuration.

 

We have a Meru Wireless system (MC3200 Controller and SA200 IDM) coupled to a Smoothwall Proxy server.

 

A BYOD sponsor portal has been set up and is working fine, with temporary guest accounts being created for a max of 12 hours.

 

The problem we now have is that the Smoothwall now expects the user to supply credentials to browse the Internet; this is usually their network logon credentials but as these are Guest accounts they do not exist within Smoothwall. Is it possible for the Proxy server to check if the Guest account exists from the Meru IDM? If not, what is the best way forward to manage Guest accounts?

 

Any help/guidance would be welcome.

[lostsoul]

So the captive portal and guest accounts are on your wireless controller? You can change the authentication policy on your Smoothwall for your BYOD network to "No Authentication".

[robk]

Assuming the Meru controller can send Radius Accounting requests this may be the way forward. That's how our visitor wifi works, Ruckus handles the authentication and sends the smoothwall box accounting updates, web traffic is then shown against the guest user id on the smoothwall box.

[kjadams]

Hi RobK,

 

That sounds promising. Would the Smoothwall box be classed as a 'Radius Client' or a 'Radius Accounting Server'? I'm guessing the latter.

 

I'll give it a try after hours.

 

Thanks

[robk]

It's accounting server you need. It should be none destructive in that it will either work or you will be left with the two logon prompts.

[kjadams]

Worked a treat on my own mobile device.