Use this option to override the access point's captive portal server configurations
at the device level. You can also override the RADIUS server, DHCP server, Bonjour
Gateway Forwarding Policy, and Imagotag Policy settings.
To set or override the access point profile‘s services
configuration:
Go to Configuration →
Devices → Device Overrides.
The Device Overrides
screen displays. This screen lists devices within the managed
network.
Select an access point.
The selected access
point's configuration menu displays.
Expand Profile Overrides
and select Services.
The Services
configuration screen displays.
Refer to the Profile_Captive_Portal field to select or set a guest access
configuration (captive portal) for use with this profile.
Captive portals are access
policies that guests temporary and restrictive access to the access point
managed network.
A captive portal is a browser-based authentication mechanism that forces
unauthenticated users to a web page. Captive portals capture and re-direct a wireless user's
web-browser session to a captive portal login page where the user must enter valid credentials
to access the wireless network. Once logged into the captive portal, additional
Acknowledgment, Agreement, Welcome, No Service and Fail
customized pages enhance screen flow and user experience.
Select an existing captive
portal policy.
If an existing captive portal
policy does not meet your requirements, use the Create or
Edit
icons to create a new captive portal policy or edit an existing policy. For more
information, see Captive Portal Policy.
In the RADIUS Server Application
Policy section select an Application policy or Purview
Application policy based on the AP type. This will override the selection made
in the profile context.
For legacy WiNG 802.11ac APs,
running WiNG 7.2.1 OS, select an Application policy from those listed on the
screen. To create a new policy click, Create and the
define the Application policy settings. For information on creating Application
policies, see Application Policy.
For 802.11ax APs, running WiNG 7.1.2 or later version of
the WiNG 7 OS, select a Purview Application policy. To create a new policy
click, Create and the define the Application policy settings.
Refer the WiNG 7.2.1 CLI Reference guide for information on Purview
Application Policy.
Use this option to enforce RADIUS change of
authorization (CoA) in the profile configuration context. when
enforced, successfully authenticated users are reauthenticated and the
attributes of their active AAA session changed based on the rules defined by
the application policy.
Use the DHCP Server Policy
drop-down menu to assign this device a DHCP server policy.
Dynamic Host Configuration
Protocol (DHCP) is a client-server protocol that manages IPv4 and IPv6 address
assignment to network resources and mobile devices. Central to the DHCP IP address management
process is the DHCP server that dynamically assigns IP addresses and related configuration
information, such as gateways and subnet masks to the DHCP client.
If an existing DHCP policy does
not meet your requirements, click the Create icon to
create a new policy configuration that can be applied to this profile, or click
the Edit
icon to modify the parameters of an existing DHCP Server policy.
Use the DHCPv6 Server
Policy drop-down menu assign this device a DHCPv6 server
policy.
DHCPv6 is a networking protocol for configuring IPv6 hosts with IP addresses, IP
prefixes, or other configuration attributes required on an IPv6 network. DHCP in IPv6 works in
with IPv6 router discovery. With the proper RA flags, DHCPv6 works like DHCP for IPv4. The
central difference is the way a device identifies itself if assigning addresses manually
instead of selecting addresses dynamically from a pool.
If an existing DHCP policy for
IPv6 does not meet your requirements, use the Create or
Edit
icons to create a new DHCPv6 server policy or edit an existing policy.
Use the RADIUS Server
Policy drop-down menu to select an existing RADIUS server policy
to use as a user validation security mechanism with this device.
A profile can have its own
unique RADIUS server policy to authenticate users and authorize access to the
network. A profile‘s RADIUS policy provides the centralized management of
controller or service platform authentication data (usernames and passwords).
When an client attempts to associate, an authentication request is sent to the
RADIUS server.
If an existing RADIUS policy
does not meet your requirements, use the Create or
Edit
icons to create a new RADIUS server policy or edit an existing policy.
Refer to the Bonjour Gateway
field to select or set a Bonjour Gateway Forwarding Policy.
Bonjour is Apple‘s implementation of zero-configuration networking (Zeroconf).
Zeroconf is a group of technologies that include service discovery, address assignment and
hostname resolution. Bonjour locates devices such as printers, other computers and services
that these computers offer over a local network. Bonjour provides a general method to discover
services on a LAN. It allows users to set up a network without any configuration. Services
such as printers, scanners and filesharing servers can be found using Bonjour. Bonjour only
works within a single broadcast domain. However, with special DNS configuration, it can be
extended to find services across broadcast domains.
Bonjour Forwarding Policy enables discovery of services on VLANs which are
not visible to the device running the Bonjour Gateway. Bonjour forwarding
enables forwarding of Bonjour advertisements across VLANs to enable the
Bonjour Gateway device to build a list of services and the VLANs where these
services are available.
Use the Location Policy
drop-down menu to select and apply a location policy to the
controller/virtual controller. The location policy provides the ExtremeLocation
server's hostname and ExtremeLocation tenant's location API key. This
information is required by the controller to authenticate and authorize with the
ExtremeLocation server. Use the Create or
Edit
icons to create a new policy or edit an existing policy.
Note
For information on creating
location policies, see Location Policy.
Refer to the Imagotag Policy
field to select or set a Imagotag Policy. Use the drop-down menu to select and
apply an Imagotag Policy to the AP's profile. You can use the Create to create
a new policy or Edit icon to edit an existing policy.
For more information on
enabling support for SES-imagotag‘s ESL tags, see Configure Imagotag Policy.
Select OK to save
services configuration overrides.
Select Reset to revert
to the last saved configuration.