Corporate responsibility for logging guest Internet access

Hi all
Can anyone tell me what the requirement is in the uk for logging guest Internet access for guest users at my co
Company ? Is it lawful requirement ?

The following documents lists all the supported Databases,
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/user/d.htm

Similar Messages

Guest Internet access in the Enterprise

We have set up guest internet access in our enterprise using GRE tunneling with a PIX. I'm trying to determine the best way to do authentication for users on this guest network.
I think I can do RADIUS (using ACS) with the PIX as an NAS. Question is can I use a different type of server (such as MS IAS)? Can I use either one to utilize an existing MS Active Directory database?
If I use radius on the pix for authentication, a login prompt pops up when a user tries to use the web. Is there a way to redirect users to a web page first and have the login embedded on the page? This is done in hotels now and I don't know if there's a Cisco solution for this.

The following documents lists all the supported Databases,
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/user/d.htm

EA6100 AC1200 Blocking Guest internet access during specific times?

I see that you can disable guest internet access for specific times but only for specific devices. What I want to do is turn off Guest access for all devices during specific times.
I am using this in an environment where I will have different guests at different times with different devices and can't go in to block each one each time.

I think your only option at this time is to manually disable the Guest Wireless network when wanted.
Please remember to Kudo those that help you.
Linksys
Communities Technical Support

Load Balance guest Internet access via two different DMZ zones at two sites

Hi Sir,
My customer has the following unified wireless guest access requirement:
- There are 2 internet links and dmz zones at two different locations, Site A and Site B
- Data centre is at Site A
- WiSM is proposed to be installed at the Cat 6500 in Site A
- Lightweight AP are distributed across Site A, Site B and other branches
- Only one anchor WLC is proposed at Site A, DMZ zone to provide guest internet access
My customer would like to load balance the guest via the two internet link at Site A and Site B but with the same SSID across all locations. Can it be done since only one anchor at Site A? How about puttting another anchor WLC at Site B, DMZ zone? But how can i establish two EoIP tunnel to two different anchor WLC from a single WiSM?
Thanks for your help
Delon

You can... but you can't control where the traffic will flow. The wlc will determine which DMZ wlc it will use. The wlc will load balance, but traffic in site A might go to site B. I currently have deployed that senerio in multiple client installations....

Restrict Wireless Guest Internet Access

I am implementing a wireless guest solution for Internet access. I would like to restrict these users to Internet access only. I undestand the concept of configuring a seperate vlan for them but how can I restrict them to Internet only. I also have remote campuses that I would like to setup as well. I have an ASA 5520 for my firewall and am using metro ethernet from the main campus to the remote campuses. Thanks for any help.

Hello,
I have found the simplest way of doing this is to apply an access list to the radio sub-interface for the vsitor vlan.
Set the access-list to allow any dhcp requests, deny any to a private network and permit any.
You could do it back at the ASA but there is a chance of the traffic getting onto the network first.
HTH.
Andy.

SCEP updates for servers without internet access

I have servers that are Windows Server 2012 and Windows Server 2008 R2 that CANNOT have internet access. I pushed the CM client to them and the SCEP client but they cannot get the SCEP updates. The error in the WindowsUpdate.log is:
2014-04-25 09:13:59:695 992 b94 Misc WARNING: WinHttp: SendRequestUsingProxy failed for <http://download.windowsupdate.com/v9/1/windowsupdate/redir/muv4wuredir.cab>.
error 0x8024402c
I think the Windows Update Agent is trying to update from MS.
When I run RSOP.msc, I do see that the CM server is listed as the WSUS server and was updated in local group policy which is what the CM client is expected to do.
What do I do in a situation where the machine does not have internet access and I need to update the WU agent?
Thanks,
Mike

Make sure that Disable alternative sources is set to
Yes in the ConfigMgr client settings and make sure that in the antimalware policy
Set sources and order for Endpoint Protection definition does not included Microsoft Update.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

ASA 5510 Guest Internet Access

I have a subnet for guest network access, both wired and wireless. We have a Netgear ProSafe that is trunked to a Cisco 2901 performing 'Router-on-a-Stick'. For most internal traffic, it all stays behind the ASA. But for guest traffic, I have a route-map that sets the next-hop address as the outside interface of the ASA. The question is, how can I still permit those users to access our internal DNS servers? Do I need any particular NAT translations, exemptions, DNS doctoring, hairpinning, etc.? I have an ACL on the inside interface that permits traffic from the guest networks to our internal DNS servers, and then the next ACL line denies any other traffic from the guest networks to any of our internal networks.
Regards,
Scott

Hello Scott,
Your ASA will need to have a route for both networks
You also will need the following command:
-same-security-traffic permit intra-interface
The thing is that the packets from the guest vlan will go directly to the ASA as its default gateway, then packets will be routed to the Router on stick and finally to the DNS server, the reply will go from the DNS to the Router on stick and then directly to the Guest user.
Nat exemption will look like this:
access-list nonat permit ip 192.168.14.0 255.255.255.0 host 192.168.11.6
access-list nonat permit ip 192.168.14.0 255.255.255.0 host 192.168.11.4
nat (inside) 0 access-list nonat
Please give it a try, also please provide packet tracer
packet-tracer input inside udp 192.168.14.10 1025 192.168.11.4 53
Regards,
Julio
Rate helpful posts

N80 as a modem for Dial-up Internet access?

How do I use the N80 as a modem to dial a certain phone number for internet access? Which cable do I need for this to happen, and also how to set it up? Thanks in advance.

22-Jun-2007 02:50 AM
sophieinsydney wrote:
Can someone or NOKIA please help? I have seen so many messages of the same problem and apparently NOKIA remains silent! How do we reach Nokia support please?
sophieinsydney, these boards are for user-to-user support only. They're not the place to get support from Nokia. If you want to get help from Nokia, you should use the 'Contact us' link at the top of the page to contact your local Nokia team.
You might also want to read over the Discussion Board Guidelines which is something everyone should read before posting on the boards. It explains this and other things.
Board Mod Team
READ THIS FIRST!
Click here if you want help from Nokia

Load Balancing 11i for both Intranet & Internet Access

Our current environment for 11i (11.5.5) is accessed only internally (via Intranet). We need to allow outside access (via Internet) also for self-service apps (ie. HR). Oracle Support/Metalink has stated that Load Balancing (note 148155.1) is the only supported method to have multiple (Apps Servers) systems access a single database. Could I get feedback from anyone who has implemented Load Balancing for 11i? Additionally if someone has implemented this for both intranet and internet access how has your company setup? Do the secondary server(s) from the Load Balancing note reside in the DMZ? And thus the primary app server and database reside inside the firewall? Thanks....

Hi,
We are using 6 middle tiers for internal access for intranet access and 2 middle tiers in External DMZ with only web server running for Extrenal Access over Internet for Self Service.
You Implement one Load Balancer for first 6 internal Middle Tiers with site level profiles pointing to Internal .
You implement second Load balancer for external 2 middle tiers with server level profile options for these two servers pointing to External Load balancer .
To check how to implement load balancer vsiit
http://becomeappsdba.blogspot.com/2006/09/configure-hardware-load-balancer-at.html
Wait for my next post in above blog site with step by step procedure to implement above solution External & Internal one
Atul Kumar
Oracle Apps DBA
http://teachmeoracle.com

Connection to the server failed for email, but internet access is fine.

My iPad 2 worked fine yesterday and today I cannot get mail. The message says connection to the server failed or all of my email accounts. Internet access is fine.

Try again with the e mail. The message means you messed up the settings. Google you ISP and e mail settings. They will tell you the server name for incoming and outgoing. They will be different. Pay attention to port number and be careful to make sure you enter the password right. Since the rest of the internet works, your problem is just with the security on your ISP.

Send quiz results for users without Internet access

We have a group of developers in India who do not have internet access. I have created an eLearning course in C4 with a quiz at the end. For most users, they take the course through our LMS and we can report results without a problem. However, we have a group of developers in India who do not have internet access. Is there a way to capture name and quiz results and send them via email? Alternatively, we can open up a port to access Connect, but I still need to report name and quiz results.
Thank you,
FG

Hello,
Are those users connected in a network? If yes, with the version of Captivate 5 (will be available shortly) it will be possible to have the results send and stored on a server.
Lilybiri

Flash player for systems without internet access

I am trying to install the newest version of Flash on a few computers without internet access, but I'm having a hard time making that happen. What do I need to do to get the latest version of Flash on them without connecting them to the internet (they are in an area where internet access is forbidden).
Thanks
-Justin

Hi Justin,
You can download the full installers from the following help pages (including both Windows and Mac, as there was no OS specified):
Installation problems | Flash Player | Mac
Installation problems | Flash Player | Windows
Scroll to the bottom, in the 'Still having problems' section. There are several installer types for various browsers. You'll want to download the ones for the browsers you use.
Maria

Create a CD/DVD for use without internet access

I am very satisfied with the website I created using iWeb on Mobile Me. I would like to create a CD or DVD where I can add an autorun function to enable those without convenient internet access to see the information. Can anyone point me to a source where I can learn how to do this and what additional software I would need?
Thanks
Claire

Welcome to the Apple Discussions. Do the following;
1 - publish your site to a folder on your hard drive. You change the destination by clicking on the site folder and selecting the folder you want to publish to (lower left hand image):
Click to view full size
2 - put a CD into your optical drive.
3 - drag the contents of that folder, an index.html file and a folder with your site's name, onto the empty disk icon on the desktop.
4 - drag the disk icon to the Trash icon in the Dock which turns into a Burn icon and burns the disk.
The disk will let other Macs double click on the index.html file to open your site in the web browser of choice.
However, PCs may not be able to do the same. Mac's OS X system has the necessary features built in but I'm not sure about Windows. You'll have to inquire about PCs.
OT

Guest Internet Access

Hi
Looking for input on Guest Vlan subject.
How can I avoid routing of Guess VLAN traffic to DATA VLAN, any traffic from Guest VLAN should be routed to Internet directly.
Looking for similar setup as in Hotels, Guest are provided with username/password with time duration to access internet and limit the download speed.
Do I need to create another SSID on the WLC and how the guest users will acquire ip, from WLC DHCP or Windows DHCP.
If its Windows DHCP then Guest traffic reaches my Data VLAN
Any Help

We got WLC 4420 ----- Do you mean a 4402-xx
AP 1200 series ( 5 in quantity )
I am new to WLC, can you help me to understand
How many SSID we can configure on WLC, does each ssid can have different config parameters.
The AP's and the Code you might have will only support 8-16. You don't want to configure too many (best practice is around 4) because of all the beacons that needs to be sent might cause issues with certain devices. You can configure eash ssid the same of different, it is up to you. Follow best practices on this.
can we broadcast specific SSID on AP configured with WLC ( AP#1 can be used for SSID DATA & SSID Guest ) ( AP#2 can be SSID Guest & SSID Partners )
You can create WLAN Override (depends on code - http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a00807669af.shtml) to specify what AP's will braodcast what SSID's. This can be messy if you have gaps for roaming, unless that is not an issues.
For Guest SSID is it recommended to connect to a seprate port on WLC
You have different options:
You can use a guest anchor controller in you DMZ
You can use one port on the WLC connected to your internal network and the other port to the DMZ
You can trunk vlans and use ACL's to block guest traffic from inside networks.
All this depends on you current infrastructure and if you plan on buying more equipment or use the existing.
Instead of creating Guest Users on WLC with time restriction, can this be done third party with ease of management. ( Office secretary can give access to internet to guest )
You can use a NAC Guest Server... if you want to spend a lot of money. You can configure a Lobby Admin account on the WLC so that the secretary has only read/write to add guest accounts. This would be the same if you have WCS with a lobby admin account.
http://www.cisco.com/en/US/docs/wireless/wcs/4.2/configuration/guide/wcsmanag.html#wp1078208
How to have bandwidth control on WLC, restrict users with bandwidth limit
You would need to use a 3rd party tool for this like ZoneCD or again you can use the NAC Guest Server.
http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns348/ns787/data_sheet_c78-456124.html
http://www.google.com/url?q=http://cisco.com/application/pdf/paws/107630/WLC_NGS.pdf&ei=WtSTS9HpN43OM_WnkYoN&sa=X&oi=nshc&resnum=1&ct=result&cd=1&ved=0CAgQzgQoAA&usg=AFQjCNF0eA-Z8nss7WzgpPRnFjtSdZnvWQ
http://www.google.com/url?q=http://www.cisco.com/en/US/solutions/collateral/ns340/ns394/ns348/ns787/DeployingGuestAccess_051308.pdf&ei=WtSTS9HpN43OM_WnkYoN&sa=X&oi=nshc&resnum=1&ct=result&cd=2&ved=0CAkQzgQoAQ&usg=AFQjCNGKgF_wWKQaI8lqHoFfwbg0iztVFg
Any configuration sample link with one Internet connection having DATA and Guest VLAN using ACL to restrict the traffic.
I put some links above... hope this helps. Again, it will come down to your existing environment and how much more you want to spend. You also have to look at the time it might take to setup, will the secertary want to do this, etc? How I see guest access..... well.... they go out a seperate internet pipe, so I don't really care about bandwidth. Its guests so they would have to deal with that anywhere the go, even hotspost or even worse hotels:) Make it simple and make it work... then you can add to that later when you get more familiar to configuration and troubleshooting.

Advice regarding house guest internet access through Airport Express

I would like to set up trouble-free (on my part and my house guests) access to the internet. Any thoughts or suggestions? It seems to me that if folks may have reasonable access to cable/satellite TV and telephone, or what have you, it is also reasonable to make available to them the internet. What is the best way to go about doing this? I have an existing home wireless system using Airport Express (may also work in a Netgear WG614 wireless router). Mostly, I am concerned with the technical aspects but would also like to hear from anyone regarding the legal/social ramifications. Any such solutions must take into account both Windows and Mac environments. Thanks.
17 in. iMac G5 ALS (1.8 GHz) Mac OS X (10.4.5) iMac G3 DV (400 MHz), Airport Express, 3rd gen iPod

Meme,
A nice touch, and one that made me choose one small hotel over another when I used to travel a lot.
I can't give a complete solution, but I can give you bits of info, which others will also do.
One thing that probably is a must, is to set Wireless Isolation. That is that although all the wireless clients can see the internet, they can't see each other. I'm not sure that the AE supports this, I honestly thought it did, but now I can't find it. The Netgear will support it.
Wireless encryption will be a must too, you may even want to make it a "closed network", so that the network does not advertise it's presence. Clients wishing to connect must specify ("key in") the network name and connect. That may be just a little too difficult for some business travellers. Back to wireless encryption, some may say to use some ultra-modern hi-tech secure encryption algorithm to be really safe, but these are enormous long passwords that your clients will have to key. Those with older computers may not support the latest encryption methods. Some may recommend WPA, I'd say WEP (more compatability) and a simple (non-dictionary) password, like "@pple" or "@irPortXPr3ss" or any easy to communicate word(s) with a few letters replaced by vowels or (printable) symbols. It is up to you how often you change the password.

Corporate responsibility for logging guest Internet access

Similar Messages

Maybe you are looking for