aruba-clearpass培训

CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.AllrightsreservedClearPassguest（Amigopod）高级培训Peoplemove.Networksmustfollow.™CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.AllrightsreservedCONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.AllrightsreservedClearPassGuest(Amigopod)介绍CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved3Amigopod是什么？•Amigopod是一款非常灵活、功能强大的访客帐号管理软件•Amigopod是能够实现客户化设计的WebPortal外置服务器•Amigopod是能够与各种网络设备配合的Radius认证服务器•Amigopod是支持网页、邮件和短信等媒介的广告发布平台•Amigopod是理想的访客信息和兴趣收集、统计和分析系统•Amigopod是实现移动终端接入控制的证书和配置分发系统CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved4ArubaAmigopod访客管理系统领先的访客访问解决方案AutomatedaccountProvisioningMulti-VendorSupportSupportsallMobileDevicesCustomBrandingCompliance&AuditingCONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved5访客自注册流程•灵活的访客自注册系统，最大支持25,000个访客同时在线•基于Portal页面，支持所有的移动终端•基于用户角色的管理，保证安全•支持Email与短信方式通知访客帐号•彻底的将网管人员解放出来CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved6AmigopodArubaAP访客自助注册流程Aruba控制器没有访客帐号的用户可以点击自助注册链接联系人访客在自助注册页面填写访客信息及联系人邮箱Amigopod告知访客帐号正在等待联系人批准Amigopod把访客帐号申请通过电子邮件发送到联系人电子信箱Amigopod告知访客帐号已经获得批准，并正在通过短信发送给访客联系人点击链接并确认开通访客帐号CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved7ClearPassguest组成•Centos5.5LinuxOS–2.6.18kernel•FreeRadius–Fast,featurerichandscalable•PostgreSQLDatabase–ANSI-SQL:2008•ApacheWebserver–Runsover100millionwebsites–54%ofinternetwebsites(Feb2010)CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved8设备硬件及网络架构•10/100/1000LANandMGTPorts•RadiusandOperatorsonMGTport•UsercaptiveportalsandselfregistrationpagesonLANportCONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved9管理方式•启动后会显示Web登录的地址；•Web登录默认的用户名与密码为：admin/amigopod•可以在Administrator里修改密码•注意：第一次修改web页面的密码时CLI的密码也会修改；Guest目前仅提供VMware虚拟机安装，直接点击.vmx文件即可自动完成安装。CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved10ClearPassGuest插件•所有插件都是独立的，•客户的Amigopod支持的插件由注册ID（SubscriptionID）决定•插件需要购买license，即SubscriptionID才生效•插件及OS系统的更新是在Amigopod的网站下载的。•设备必须可以直接访问外网CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved11修改端口的IP，会引起业务重启在AdministratorNetworkSetupNetworkInterfacesCONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.AllrightsreservedCONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved管理部分（Administor）CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved13设备管理CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved14分级管理员CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved15插件管理CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved16已安装的插件CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved17设备网络参数配置CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved18网络接口参数配置当两个端口都配置网关时的默认路由CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved19分级管理员CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved20邮件发送者配置CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved21短信服务设置CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved22短信网关设置CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved23系统配置CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.AllrightsreservedCONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.AllrightsreservedRadius服务器部分CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved25ClearPassGuest做Radius服务器CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved26Eap与802.1x认证配置CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved27认证数据库管理CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved28配置NAS配置完NAS后需要重启radius服务同时创建weblogin页面CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved29RadiusServer参数配置CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved30服务器的控制CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved31创建角色不同的角色用户如何选择不同的自注册页面？CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved32创建角色及属性CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.AllrightsreservedCONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved帐号部分（guest）CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved34Geust中包括内容CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved35创建新的guest帐号CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved36帐户管理CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved37活动的会话（activesession）可以点击某一用户强制其下线CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.AllrightsreservedCONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved客户定制（Customization）CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved39访客管理目录CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved40内容素材管理默认对应的目录是publicCONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved41表单与域项CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved42一个表单例子guest-registerCONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved43用户自注册参数CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved44自注册页面与角色关联CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved45接收的action动作配置CONFIDENTIAL©Copyright2011.ArubaNetworks,Inc.Allrightsreserved46编辑表单