Wireless Access

Hello

I have question about integration of the WLAN controller with hotel's system.

How to create guest user on the controller directly from other application.

Using SNMP probably it is not possible. Using CLI over ssh is possible but we need to use user with root privilege and enable password. Using guest provisioning page and user is possible but not optimal for thirty part application.

Is it any tested option for that?

Regards

Darek

You will probably want something along the lines of Amigopod/Clearpass to do this.

We do external captive portal through Aruba not using the portal directly on the controller.

Guest provisioning can be used which will create a username/password for a particular user but is used for authentication on the WLAN, the captive portal is email only as far as I know...

The captive portal functionality integrated into the Aruba controller can do either username/password authentication for guest users, or it can do basic guest (ie email address) authentication. The captive portal profile will determine which method is used for a given WLAN. 

ClearPass may still be an excellent solution for fitting into the guest self-service model if the hotel property management solution does not provide similar functionality though.

Hello

The hotel's system can provide option to send some commands to Aruba controller but I am looking for better solution that login as admin by ssh and run local-userdb add username ....

so you're looking for a way to script adding a username/password to the internal userdb ??

Yes

This commands do the same what guest provisioning page does.

The problem is that I do not want to give root privilage to external application.

A guest provisioning user can create usernames and passwords on the internal DB.

You do not need to give root access in order to do that.

So lets try to do it over CLI.

1. create a guest provisioning user

2. use the account and log in via CLI (ssh)

3a. command: the following command is for automatic generation of usernames/passwords

#local-userdb-guest add generate-username generate-password ?
comments                Comments
email                   E-Mail of the User
expiry                  Set when account will automatically expire
guest-company           Guest company name
guest-fullname          Guest full name
guest-phone             Guest phone number
mode                    Enable/Disable the user (default is enabled)
opt-field-1             Optional field 1
opt-field-2             Optional field 2
opt-field-3             Optional field 3
opt-field-4             Optional field 4
sponsor-dept            Guest sponsor department name
sponsor-email           Guest sponsor email address
sponsor-fullname        Guest sponsor full name
sponsor-name            Guest sponsor name
start-time              Set start time when account will be active
<cr>

 3b. The following command is for user specific usernames/passwords

#local-userdb-guest add username <username> password <password> ?
comments                Comments
email                   Guest email
expiry                  Set when account will automatically expire
guest-company           Guest company name
guest-fullname          Guest full name
guest-phone             Guest phone number
mode                    Enable/Disable the user (default is enabled)
opt-field-1             Optional field 1
opt-field-2             Optional field 2
opt-field-3             Optional field 3
opt-field-4             Optional field 4
sponsor-dept            Guest sponsor department name
sponsor-email           Guest sponsor email address
sponsor-fullname        Guest sponsor full name
sponsor-name            Guest sponsor name
start-time              Set when account will be active
<cr>

Ok Thanks.

But You need to put enable password anyway.

yes but the guest-provisioning account does not let you view the running configuration even with the enable password