Wireless Access

Reply
Occasional Contributor II
Posts: 13
Registered: ‎04-18-2012

Force ExpirationDate for guest-provisining profile

Dear All,

 

I have installad a Guest and a Corporate WiFi networks in an Industrial Plant, the Corporate is for Internal user only (proxy and internet filters) the Guest is only for external users, this is separated from the LAN and bypass every internet controls proxy and filters.

 

Now i must delegate the guest-provisining to no-IT people and i wish to set restrictions on the expiration time of the guest profile they will generate. I want avoid that they create eternal accounts on the Guest Network to use like a free internet account with no restriction for internal people.

 

is it possible to force the expiration date in 2/3 days? and then disable the "End date" field?

 

Thanks in advance.

 

 

MVP
Posts: 4,271
Registered: ‎07-20-2011

Re: Force ExpirationDate for guest-provisining profile

See if this helps :

Are you using the internal captive portal or ClearPass/Amigopod ?

GUEST ACCOUNTs.png

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II
Posts: 13
Registered: ‎04-18-2012

Re: Force ExpirationDate for guest-provisining profile

Hello,

 

Thanks for the fast reply, i'm using ArubaOS 6.1.2.3.

From your table it seems to me that I can not costumize the guest-provisining role, it's correct? any workaround?

MVP
Posts: 4,271
Registered: ‎07-20-2011

Re: Force ExpirationDate for guest-provisining profile

Guest Provisioning_2013-05-22_10-41-42.png

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II
Posts: 13
Registered: ‎04-18-2012

Re: Force ExpirationDate for guest-provisining profile

sorry I did not understand, I've have already used this table, but i can only enable or disable these fields ... if i disable the "end_date" then I presume the accounts created by the guest_provisiong profile are endless and this is exactly what I want to avoid.

I want disable the "possibility of choice" of the end date and force this field in this way: end_date = start_date + 2days or something like that.

Thanks,

MVP
Posts: 4,271
Registered: ‎07-20-2011

Re: Force ExpirationDate for guest-provisining profile

Sorry I should have explain when I posted the last screenshot but what I meant that is the only customization available unless you have an external guest portal clearpass/amigopod
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II
Posts: 13
Registered: ‎04-18-2012

Re: Force ExpirationDate for guest-provisining profile

Ok, thank you for your help!

Aruba
Posts: 1,287
Registered: ‎08-29-2007

Re: Force ExpirationDate for guest-provisining profile

[ Edited ]

The command you need is this

 

local-userdb maximum-expiration <mins>

  It will then not be possible for a guest-provisioner to create a user with a longer expiry time.  Normally done on the Master controller which is where the database is held.

 

Hope that helps

 

:smileyhappy:


If my post is helpful please give kudos, or mark as solved if it answers your post.

ACCP, ACMP, ACMX #294
mclarke@arubanetworks.com
Occasional Contributor II
Posts: 13
Registered: ‎04-18-2012

Re: Force ExpirationDate for guest-provisining profile

Thank You, it works like a charm!

Occasional Contributor II
Posts: 13
Registered: ‎04-18-2012

Re: Force ExpirationDate for guest-provisining profile

Hello guys,

I update this old post because i found a correlated problem to this issue, maybe a bug.

 

Following the solution i'va set a maximum expiration time to 7200 mins (5 days), but when i create an user postdating the starting time, it begin to calculate the time from the creation time and not frome the starting data (please take a look to the attachment, today is 2nd july).

 

Thanks,

Davide

 

 

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: