AP 2602 in autonomous Mode with webauthentification

[interface31]

Hi,

i have ab 2602 in autonomous mode.

Now i want to setup for guest a login.

With a custom Page when you Login like a Mall Login.

How i can configure this?

cu

[TJ-20933766]

You can find the configuration within this guide under "Guest Access Management" : https://www.cisco.com/c/en/us/td/docs/wireless/access_point/15-3-3/configuration/guide/cg15-3-3/cg15-3-3-chap11-authtypes.html#81952

Some things to consider if you're doing this on more than 1 AP:

1) When a client roams from one AP to another, they are likely to have to authenticate through the web portal. This is a disadvantage of using autonomous APs vs using a controller to manage lightweight APs

2) Using local authentication would mean having to make changes to all APs anytime you wanted to change the username/password. It would be best if you used an external RADIUS server unless you intended on not having the end user authenticate (such as just accepting an Acceptable Use Policy) or a single credential that everyone uses but never changes.

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/116897-configure-technology-00.html

this way

[interface31]

Hi, 

thank you and wish you a happy new year!

At the webfrontend i can do this also?

The Radius Server sounds good, i have a raspberry can i install this on them?

I want to use it only for my friends and my neighbours where don´t have internet.

cu

[TJ-20933766]

Yes, you can configure this on the web front end. I found it under Security > SSID Manager > Client Authentication Settings. Look for Web Authentication check box.

I believe you can install a RADIUS server on a Raspberry Pi with something like FreeRADIUS or the like. Here's a video on how to install on Raspberry Pi: https://www.youtube.com/watch?v=8MVWrCgaH68. If you're just using a couple of APs or a single credential that everyone will use, you can just use the local authentication on the AP instead of having to worry about a Raspberry Pi

[interface31]

Hi, great thank you i will try it

[interface31]

Hi,

i try Web Authentication but can´t Login.

At 

Create an authentication rule, where you must specify the proxy authentication protocol, and name it web_auth:

where?

[TJ-20933766]

You will need to enter the command line via console, SSH, or Telnet, go to config mode, and enter the following commands:

ip http server
ip http secure-server
ip http authentication local

If you don't have a user created, you can add one with the following commands (replace "admin" and "password123" with whatever you want it to be):

username admin priv 15 secret password123

If you don't have an IP address assigned to the AP, you'll need to assign it to the BVI1 interface with the following command:

interface BVI1
 ip address 10.0.0.2 255.255.255.0
 no shutdown

Now you should be able to ping the BVI1 interface from your computer. If you cannot, make sure that your computer is on the same subnet as the BVI1 interface. If you can ping it then put the IP address into a web browser and continue your configurations through the Web UI.

Let me know if you run into further issues.