Security

Just starting to look at end users registering game consoles via clearpas guest page so they can connect to a WPA2-PSK network. Got it to work, but theres too much onfo on the default screen ( see attachged image)

 

Ideally I want . ...

The user to see a name field and a mac address field and nothingf else 

or

As a more general reg page , add a drop down list defining valid device types e.g "Game Console" "Chromecast, Roku,Apple TV etc and when you select one you get a dynamic page

 

e.g. If game console,  then just prompt for device name and mac adress

if one of a list of airgroup devices, make the airgroup device visible ( or check it automagically)  

 

2nd option would be cool!

A

We generally recommend using device roles to keep it more generic, aka "Media Player", "Printer", "Game Console" vs having specific models.

 

We also recommend you automatically enabled AirGroup for all devices in the background by checking the box and hiding the field so that devices are automagically always shared to at least their owner. You would also hide the Personal vs Shared field for students and expose only the Shared With field.

 

Here's an example of a common university deployment:

>>We generally recommend using device roles to keep it more generic, aka >"Media Player", "Printer", "Game Console" vs having specific models.

 

Do that already, "UoY Game Console" "UoY Airgroup Device", They;re used in the enforcement policy

 

>We also recommend you automatically enabled AirGroup for all devices in >the background by checking the box and hiding the field so that devices >are automagically always shared to at least their owner. You would also >hide the Personal vs Shared field for students and expose only the Shared >With field.

o.k. and how do I set these and hide them in the background?

 

Would an end user know what “AirGroup” means? The goal is to abstract all of the sharing from the user so it “just works”.

Set the initial value to the desired state (1 to enable, 0 for personal, etc) and then change the user interface to hidden.

So thta's done in clearpass guest/Confoguration/Pages/Fields ?

 

In the mac_create form, click Edit Fields.

problem is while users might  recognise a game console as being a game console, probalby wouldn;t know what an airgroup device is without us telling them.

**bleep**! thinking the same thing :-)

Right, so why not use “Media Player”, “Game Console”, “Printer”, etc?

Because we've got 3,000,000 people here that all need to have their opinions considered :-(

 

but yes its a good idea, I'll start with that

Think I've broken something. Whatever I did, now in my mac_create form I don't see any airgroup fields. If I go to fields and select e.g. airgroup_device _ype  and show forms, I can see which forms its  used in .. and mac_create isn't one of them.

 

This is on 6.7.4

 

Also, I tried to duplicate mac_create so now have a mac_create and a mac_create_2. One has an option to reset to default while the other one doesn't. Either way, neither of them have any airgroup fields

A

 

 

You can reinsert them or click “Reset to Defaults” on the form.

ermm no, deleted the duplicate  mac_create I'd created which had the reset to defaults option.

Now back to one mac_create but there is no reset to defaults and all the airgroup options are still missing.

 

How do you manually add a field to a form ?

 

Also, I do a nightly config backup, does it also have the cleasrpas guest stuff in it?

Click any field and use the insert above or below option.

Phew!

o.k. thanks for that, now I can re-inset the missing fields 

Thx

And done ... I think, mac_create now has all the appropriate fields in it. 

Of course as I've had to change some of the fields to hidden, its changed them for anywhere else they're used so guess I need to create my own versions of the ones I've hidden and add them to my form instead of the global ones

A

Hi,

 

Id there any docuemtnation/guide how to achieve this ?

 

Many Thanks