topic Re: What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2? in Aerohive Migrated Content

What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2?

m_bock — Tue, 20 Nov 2018 17:02:54 GMT

What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2?

Re: What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2?

samantha_lynn — Tue, 20 Nov 2018 21:57:46 GMT

Could you expand on what you are looking for when you say guest management system? Do you mean self registration, social log in, employee approval, a guest manager who is able to make users but isn't see or manage any other Aerohive configuration, internet access only for guests while blocking internal resources, placing guest traffic on a different VLAN, or something else?

Re: What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2?

m_bock — Thu, 29 Nov 2018 04:29:41 GMT

It should be possible to create guest accounts. The Guest Wifi should be an open wifi who opens a captive portal page when the user is connected. On the captive portal page the user should enter his username and password.

Re: What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2?

samantha_lynn — Thu, 29 Nov 2018 04:52:22 GMT

You can create an open SSID with a CWP that redirects to an external authentication page that you have set up. Is that what you were looking for?

Re: What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2?

m_bock — Thu, 29 Nov 2018 04:55:01 GMT

Do I need a external authentication server?

I thought HiveManager has this in a box and does not need a 3rd party application/server?

Re: What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2?

samantha_lynn — Thu, 29 Nov 2018 05:09:09 GMT

For that exact configuration of having an open SSID, with a CWP, that requires a username and password, you would need an external authentication server set up. If you want to require users enter a username and password, we'd need to set up Radius. We can do this on the APs, but this isn't typically used for guests, as they would have to be known users before getting access to the network.

If you want users to come in to the network, connect to an Open SSID, get directed to a CWP where they enter information about themselves (name, email, phone number, who they are here to see), then get emailed PPSK credentials to use so they can then connect to the PPSK Guest SSID, we can set that up as well.

If you just want every user to have a unique password, we can set up PPSK in the HiveManager without self registration. They'll all have unique usernames in the HiveManager user list, but they won't need to enter their username to connect, and they would all have their own passwords that they would need to remember.

We can set this up so that you have a bulk amount of generic user names, like Student0001 or Guest0001, that you can hand out. All users will have a unique identifier, but they won't necessarily have any identifying information in their user information like we would if we manually created PPSK users such as Sam Pirok or Markus Bock. We could also set up a Guest Manager user that can log in to the HiveManager to create new PPSK guest users, but wouldn't have access to the rest of the HiveManager.

If you want every user to enter the same password, we can set up a PSK SSID. It just depends on what you are trying to do and how strict your parameters are. If you could clarify more about what your guest user needs are and what the end goals for the network set up are, I can try to help narrow down our options.

Re: What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2?

m_bock — Thu, 29 Nov 2018 05:12:25 GMT

What's best practice for guest guest wifi with aerohive? Is it possible to get some docs?

Re: What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2?

samantha_lynn — Thu, 29 Nov 2018 05:30:57 GMT

The most common Guest SSID is an Open or PSK SSID with a Guest-Internet-Access-Only IP firewall policy so that they can't access internal resources but can get to the internet. Some also add a User Policy Acceptable CWP as well if they have a message for guest users or want them to agree to use terms and conditions.

This guide will walk you through how to set up the PSK SSID- https://thehivecommunity.aerohive.com/s/article/PSK-SSID-How-To

To enable the firewall policy you would want to open the User Profile assigned to the SSID or make a new one> Under the Firewall Section select the existing IP Firewall Object named Guest Internet Access Only and save.

Re: What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2?

m_bock — Thu, 29 Nov 2018 17:22:09 GMT

Sorry. That's not what we need.

We need User-Authentication on a captive portal. It's no problem to install a linux based freeradius server for creating users.

Is the captive portal webpage available on the HiveManager or do I have to install, configure a webserver with the captive webpage by myself?

Re: What do I need for a Guest Management System on a running AH wifi with Hivemanager 8.1r2?

samantha_lynn — Thu, 29 Nov 2018 22:57:29 GMT

If you set an Open SSID to use a User Auth CWP, we have two options. We can set it to authenticate via Radius server, and you can set a Radius server up on an AP and host the CWP on the AP, so no external set up needed. Or we can redirect to an external URL for authentication. I want to state again though that we don't typically recommend Radius for guest access, as they have to be known users before they can sign in, which isn't really a guest user so much as a known internal user.