osu

Adds an osu (online sign up) SSID (WLAN)/OSU provider and enters its configuration mode

WiNG managed clients can use OSU for registration and credential provisioning to obtain hotspot network access. Service providers have an OSU AAA server and CA (certificate authority). For a client and hotspot to trust one another, the OSU server holds a certificate signed by a CA whose root certificate is issued by a CA authorized by the Wi-Fi Alliance, and CA certificates are installed on the client device. A CA performs four functions:
  • Issues certificates (creates and signs)
  • Maintains certificate status information and issues CRLs (certificate revocation lists)
  • Publishes current (non-expired) certificates and CRLs
  • Maintains status archives for the expired or revoked certificates it has issued

Passpoint certificates are governed by the Hotspot 2.0 OSU Certificate Policy Specification. An OSU server certificate should be obtained from any of the CAs authorized by the Wi-Fi Alliance.

Once an OSU provider is selected, the client connects to the OSU WLAN (Open or OSEN). It then triggers an HTTPS connection to the OSU server, which was received with the OSU providers list. The client validates the server certificate to ensure it's a trusted OSU server. The client is then prompted to complete an online registration through their browser. When the client has a valid credential for the hotspot 2.0 WLAN, it disassociates from the OSU WLAN and connects to the hotspot 2.0 WLAN using standard ANQP mechanisms.

Supported on the following devices:

Syntax

osu [provider <PASSPOINT-OSU-PROVIDER>|ssid <SSID>]

Parameters

osu [provider <PASSPOINT-OSU-PROVIDER>|ssid <SSID>]
osu Use this command to configure an OSU SSID/OSU provider.
provider <PASSPOINT-OSU-PROVIDER> Creates an OSU provider for this passpoint and enters its configuration mode
  • <PASSPOINT-OSU-PROVIDER> – Specify an identification for this OSU passpoint provider serving as an online sign up identifier. Should not exceed 32 characters.
ssid <SSID> Configures an OSU WLAN‘s SSID. This is the open authentication SSID that a user can use to obtain credentials for the passpoint SSID.
  • <SSID> – Specify the SSID.

Examples

nx9500-6C8809(config-passpoint-policy-test)#osu provider test
nx9500-6C8809(config-passpoint-policy-test-osu-provider-test)#?
Passpoint OSU Provider Mode commands:
  description  Configure the English description of the online signup provider
  icon         Add an icon for the online signup provider
  method       Specify the online signup method supported by provider
  nai          Configure the NAI for the online signup provider
  name         Configure the english name of the online signup provider
  no           Negate a command or set its defaults
  server-url   Configure the signup url for the online signup provider

  clrscr       Clears the display screen
  commit       Commit all changes made in this session
  do           Run commands from Exec mode
  end          End current mode and change to EXEC mode
  exit         End current mode and down to previous mode
  help         Description of the interactive help system
  revert       Revert changes
  service      Service Commands
  show         Show running system information
  write        Write running configuration to memory or terminal

nx9500-6C8809(config-passpoint-policy-test-osu-provider-test)#
The following table summarizes NAI realm configuration mode commands:
Table 1.
Command Description
description (osu-config-mode) Configures the OSU provider‘s description
icon (osu-config-mode) Adds the OSU provider‘s icon
method (osu-config-mode) Configures the open sign up methods available on this OSU provider
nai (osu-config-mode) Configures the OSU provider‘s NAI
name (osu-config-mode) Configures the OSU provider‘s name
server-url (osu-config-mode) Configures the OSU provider server‘s URL
no (osu-config-mode) Removes the settings configured for this OSU provider

Related Commands

no Removes the OSU WLAN/provider configured with this passpoint policy
9037762-01 Rev AA