Guest WLAN accounts

I am working on Guest WLAN deployment using a anchor WLC and NAC Guest Access server for authentication. I now have a requirement to prevent Guest machines from logging in with the same set of credentials. I already have concurrent connections set to 1, but can I easily tie the user credentials to a Guest Machine when they login the 1st time.

I won't claim to be the expert, but I'm pretty sure that Guest login is a different "security" from your WLAN security. Whatever settings you use on your WLAN (WPA/WEP/etc.) must be configured in advance on the client in order for the user to connect to your wireless network and get an IP address. Once connected, the user will open up a browser (which will get redirected) to the guest logon page. At this point, the client can only resolve DNS and get to your guest logon web page. Once logged on, the user will be able to actually get somewhere on your wireless network, but the WLAN settings remain the same before, during, and after guest logon.
Also - if you can implement WCS, WCS will allow you to print or email the credentials.

Similar Messages

How to print guest WLAN account password?

When a guest wlan user is created (by the LobbyAdmn function) there I get back a pop-up box with her autogenerated password. This is normally a rather complex password. Is there any way to print this with e.g. a label printer so that I can give it to people and wish them good luck rather than writing it down, making errors, joking about my hand writing etc. etc.. I think that looks rather unprofessional.

Hi Joerg,
This capability (sadly) is only available when creating Guest accounts
using the WCS,as shown in the attached doc. With WCS you have the
option to Print or email this info;
http://cisco.biz/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html
Cheers!
Rob

Two different radius authentication methods on one guest wlan

I would like to use two different radius servers to one guest wlan.
One radius server is the Cisco NAC guest server, but I would like to use e.g. a RSA SecurID server as the second.
If the user does not exsist on the NAC guest server, the wlc should check the RSA server.
As I understand the servers mentioned under the layer 3 config tab on the wlan configuration tab is doing round-robin.
Is there any way that I can implement this?
Best regards,
Steffen Lindemann

Is there anything on the roadmap for the NAC guest server to use AD as an external database?
It seems like it shouldn't be too difficult since the server is already using AD to map sponsor roles.
We really would prefer to use a single SSID instead separate SSIDs for guest and domain accounts.
Thanks in advance!

Guest wlan

Almost there.
Scenario:
2504 wlc
Aps 1140
Port 1 lan radius all ok
Port 2 defined for guest wlan directed attach no isp router dhcp
1 utp cable on router acquire ip address
On guest wlan no ip address is given i think i tried every combinations
Any help?
Sent from Cisco Technical Support iPhone App

Scott Fella wrote:How is the controller setup. You using LAG or not? (NO, it supports???) How many ports on the wlc is connected to the switch? (ONE) What is the ip of your dhcp server? (My lan dhcp - 192.168.2.a)
Post the show WLAN for each of your WLAN's you have created.WLAN Identifier.................................. 3
Profile Name..................................... Guest WLan
Network Name (SSID).............................. WYguest
Status........................................... Disabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Disabled
AAA Policy Override.............................. Disabled
Network Admission Control
Radius-NAC State............................... Disabled
SNMP-NAC State................................. Disabled
Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Number of Active Clients......................... 0
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 1800 seconds
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
--More-- or (q)uit
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Quality of Service............................... Silver (best effort)
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Allowed
WMM UAPSD Compliant Client Support............... Disabled
Media Stream Multicast-direct.................... Disabled
CCX - AironetIe Support.......................... Disabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... None
IPv6 Support..................................... Disabled
Passive Client Feature........................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers
   Authentication................................ Disabled
--More-- or (q)uit
   Accounting.................................... Disabled
   Dynamic Interface............................. Disabled
Local EAP Authentication......................... Disabled
Security
   802.11 Authentication:........................ Open System
   Static WEP Keys............................... Disabled
   802.1X........................................ Disabled
   Wi-Fi Protected Access (WPA/WPA2)............. Enabled
      WPA (SSN IE)............................... Disabled
      WPA2 (RSN IE).............................. Enabled
         TKIP Cipher............................. Disabled
         AES Cipher.............................. Enabled
                                                               Auth Key Management
         802.1x.................................. Disabled
         PSK..................................... Enabled
         CCKM.................................... Disabled
         FT(802.11r)............................. Disabled
         FT-PSK(802.11r)......................... Disabled
FT Reassociation Timeout......................... 20
FT Over-The-Air mode............................. Enabled
FT Over-The-Ds mode.............................. Enabled
CCKM tsf Tolerance............................... 1000
--More-- or (q)uit
   CKIP ......................................... Disabled
   Web Based Authentication...................... Disabled
   Web-Passthrough............................... Disabled
   Conditional Web Redirect...................... Disabled
   Splash-Page Web Redirect...................... Disabled
   Auto Anchor................................... Disabled
   H-REAP Local Switching........................ Disabled
   H-REAP Local Authentication................... Disabled
   H-REAP Learn IP Address....................... Enabled
   Client MFP.................................... Optional
   Tkip MIC Countermeasure Hold-down Timer....... 60
Call Snooping.................................... Disabled
Roamed Call Re-Anchor Policy..................... Disabled
SIP CAC Fail Send-486-Busy Policy................ Enabled
SIP CAC Fail Send Dis-Association Policy......... Disabled
Band Select...................................... Disabled
Load Balancing................................... Disabled
Mobility Anchor List
WLAN ID     IP Address            Status
Sent from Cisco Technical Support iPhone App

GUEST WLANs ::: user self regsitration

I would like to share a few thoughts about guest WLAN access.
- if you have a lot of guests this means a lot of work in terms of account & password generation plus changing the credentials after a certain time.
Now you can offload this to lobbyadmin / "Ambassadors" but still it means work. Further on it is hard to do if you get 500 visitors. Is there any way of secure user sellf enrollment / self regiostration?
- normally, if you print the credentials on badges the credentials can be shared. Is there any way to do a mac locking in a way so that only the first MAC address which successfully loged on with this credentials can use them?
- Is there a thermal / label printer which would work with the WiSM so that the generated password can be printed on a small note/receipt once the lobbyadmin registered the guest?
Thanks,
--Joerg

Howdy,
We deployed Guest Internet Access (GIA) a year ago, before our LWAPP migration began across 30 hospital systems. Our business requirements were:
1) No charge to guests
2) Minimize have VS have not's issues (no using credit cards, etc for validation)
3) Centralized ISP(s)
4) Some form of self-reg as NONE of the hospitals wanted staff to have to do anything
We ended up doing an Advanced Services engagement with Cisco. Looked at BBSM & SSG. Settled on BBSM. GRE + VRF overlay network. The main part of the CAES engagement was to 'adapt' their existing custom 'sponsor' app to accomodate self-reg. Bottom line is we were underwhelmed with the sponsor app, although I heard @ Networkers last year from a Cisco internal IT manager that they've enhanced it considerably so YMMV.
We dropped the sponsor app & I dug in to the BBSM's SDK docs. I built a simple web form that folks get re-directed to in the BBSM's 'walled garden'. They choose Dr, Guest of Patient or business partner and based on this selection have to provide add'l info such as contact within our company. Bear in mind that there's no way to check any of this so we do have some 'donald ducks' show up in registration. Once they fill in the info, we replay their info & IP to them visually along w/ the AU policy. They click accept & it posts a string back to the BBSM that calls a pageset to initiate their session. For the doctors personal devices we BBSM auth them against radius so that they can use existing novell credentials & not have to 'sign up' each time.
This has worked pretty well for > 1yr. The BBSM unfortunately is not the most stable platform. Appliance, Win2k w/ MS ISA & some fancy cisco nat code is what it amounts to. I have 2 of them. One died already (HDD/controller) and both have had to be rebooted (hung) probably 5-6 times in 1yr.
Sooo. We are excited about GIA via LWAPP. Removes the complexities of the overlay network, gets rid of BBSMs (potentially) and has the capability to provide some redundancy where the BBSMs do not.
As far as self-reg under GIA-over-LWAPP... Since there is no way to enforce truthful registration, it is, in my opinion, of dubious value. Our previous 'extremest' security officer that insisted on it has left the building and I am exploring forgoing it completely with mgt as it's the one major complaint we get amongst otherwise raving reviews of the service (we survey the guests, etc).
One other complaint we've had is "We don't like having to (completely) re-register every 8 hours. Couldn't we just set up our own userid/password & reuse @ session expiry?"
Considering all of this, if push comes to shove & I'm forced to keep self reg as we migrate to LWAPP then here is my plan & what I think you'll want to explore:
1) Redirect the guest users to a (offbox) webform. Collect info including chosen userID/pass.
2) On post, write to sql backend. Mysql should work fine on the cheap.
3) Use ACS (or freeradius) to radius auth the user against this external (to ACS) database, just need a second or two delay to make sure form post data makes it into DB prior to posting url back to anchor controller.
Benefits:
1) Easier reporting then old reg form-post text file
2) Ability to do sql replication to alt datacenter where redundant anchors live
3) Upon user's session expiration, they can re-login using credentials they chose instead of having to completely re-register.
4) Radius server can still look @ novell via sldap for our docs.
Obviously you have to determine what the ultimate life of the user account in radius is before it's auto-purged.
Still have some details to flesh out but that should give you some ideas. Also, don't be afraid to survey your guests, even using free or cheap online survey tools (surveymonkey). Link to it @ top of selfreg form. Our users have NO problem filling out the survey & telling us what they like & don't. Good info.
Hope it helps.

I can no longer see my account name, but get a Guest user account, I can no longer see my account name, but get a Guest user account

I can no longer see my account name so I can gain access to my information, but now all I get is a Guest user account and it won't let me log into that account. All it lests me do is re-start the computer and use it in restricted mode. Can someone please help me!

Recommendation for your consideration
Hopefully your original user account was an "administrator". I have two admin accts in case one admin. acct gets "trashed.
Lets see what other forum members offer: my solution requires use of terminal and works. CLI (Command Line Interface) might be intimidating for you but we'll see what others possibly offer.
As I say the solution I have works well and will allow you to create new user(s) replacing your former users whatever type they were. I promise to check back today if no solution to you is offered...
Let 'er rip and...
cheers

How do i get rid of the guest user account on my mac?

The guest user account keeps appearing on my login screen and i want to get rid of it, i do not want others to be able to access my account. How am i able to do this? I have tried to go on through the user section and nothing i seem to do in there helps. Please help!

You don't want to get rid of, it's a security feature. If someone steals your Mac, all that account permits is Safari access, no other access to the computer. This enables you to locate your Mac.

Having trouble setting up Guest users account email address

Hi.I've been using my Macmail with my administrative account for some time now.I recently set up a guest user account for a visiting reletive.I wanted to get the "Macmail" e-mail program up and running as well so they could use the same e-mail address that I use with my administrative account.After clicking on the Macmail icon in the dock and going through the steps to set up the account......I was then able to successfully send out and recieve a test e-mail. However...........after logging out of the guest account and back to my administrative account and then logging back into the guest account again.........when I now click on the Macmail icon in the dock........the e-mail program starts asking me to go through the steps to set an email program up again.It seems to have "forgotten" or disregarded that I already did this the last time I was logged in.I'm wondering why its doing this and how do I permanently set up this email account so that it doesn't disappear every time I log out? Thanks for any assistance.

Files created while using a guest account are deleted when the user logs out. A temporary home folder is created for the guest’s files. When the they log out, the home folder and it’s contents are deleted.
Instead create a standard non-admin account...
Create a new User go to System Preferences > Accounts > "+"
-mj

Guest user account logged into while away from house/computer!!!

Warning: I am not a tech-pro!
Okay, I have a 2011 Mac Book Pro running OS X LION 10.75 (11G63) unsure what those last numbers mean but they were there so I thought perhaps it might be helpful to add them.
Recently I moved into a granny flat and pay $10 a week to use their unlimited internet wifi. I log into my wifi through this device called a WiFi Repeater? It's plugged into the wall in my unit, as I warned I am not incredibly tech savvy so I am only guessing when I say I suppose this extends the main wifi signal from the actual home owners upstairs big modem? Any who.... A few times I have seen in the Finder Memu ot says 'Shared' and under that 'Wendys PC' (Wendy is the homeowner) then if you click on it it tries to connect but won't or there is a 'Connect As' option which brings up a little screen saying - connect as wendy, which requires a password or connect as guest which doesn't look like it requires a password- I'm not certain because I've never tried to connect any further, I only pressed that initial connect button when I had mentioned to Wendy I could see her PC & she asked me to press connect & prove I could not in fact connect (I'm starting to despise the word 'connect' since having to type this post about connection). So... We just kind of let it go. It did really worry me that Wendy (who worked in the tech field for years in particular with an Internet provider, could possibly connect to my computer and nosey through all my files- and to be honest, that would not actually suprise me. She is incredibly 'inquisitive'... And that's putting it mildly. I do have a password on my Mac Book Pro but I don't think that would be that hard to break through/hack if you have the knowledge/software. And yes, I do have confidential files on there! Banking/business/private photos (I'm trying to lose weight so take one nude photo per day to do a time lapse of myself in a year or two- obviously for myself not for others eyes lol and I would literally die in the *** if someone ever saw these). So basically I have good reason to protect my privacy. As does everyone! Anyway my first question is - Could she log in and how could I tell if she had? Now, the second part of this ridiculously long question (my apologies) is I was logged into my personal account all last night & this morning. As I stated- it IS password protected. The user account is not. Before I went out (and I can't actually recall if I closed the lid or not when I rushed out today... Usually I do but maybe I didnt... Whatevs) So, I get home and activate the screen by moving my finger on the touch pad and lo & behold I'm straight away looking at a totally different screen? It took me a few seconds to realise why my desktop looked completely different with none of my files etc... It was - as you've probably guessed- because I was in fact in the guest user account. Now, I didn't even have to click ON 'Guest User' as I normally have to. When you turn my Mac on it always comes up with - 'My Full Name' (one account login) and then 'Guest User' (the second account login option).... So you HAVE to choose which one you want! But my screen was straight away logged into the Guest Users desktop! I did NOT do this guys! So, of course now I'm extremely concerned that either she, her husband or their son whom is visiting for the weekend - have either a) logged in remotely on one of their computers or b) have come into my home and tried logging in & then forgot to log out of the guest account. I want to know if there is any way to find out what they did, what they opened if they did, how to stop it from both happening at all or if my suspicions are in fact happeninh AGAIN And I guess on a more personal, less tech involved note - how would you all deal with such a situation? Let it go? Or be upfront about the fears/concerns I am experiencing since moving in just over a month ago. AND most importantly - IS there any other reason -other than someone physically logging into my guest user account & failing/forgetting to log back out so that when I got home & activated my screen I was actually looking at the guest user desktop's account instead of the Mail application screen in the 'My Full Name' password protected user account where I had actually left it before rushing out.... Like, is there ANY other possibly explanation for my user account being logged into when I'd left it on my own account t before I left that doesn't include someone in the house hacking/breaking into/snooping through my Mac? Also- you should understand that when I leave my Mac for just a few minutes I have it set up so that the computer screen 'sleeps' (I'm assuming that's the correct term) so that if for instance -exactly like this morning- I have to rush out and don't want to/don't have time to save work/quit applications/shut down etc... I can walk away leaving the laptop as is knowing within a few minutes the screen saver comes up (and if that's ledr for long enough it goes into sleep mode) and no one can actually enter my private account without my password. I feel safe knowing that.
Sorry.... I FELT safe.
I'm truly sorry for how long-winded this question has become, I simply wanted to give anyone possibly willing to help me sort out this issue, as much information as possible. I think I have actually only posted here once before (I find these sort of forums quite intimidating) and I often see people getting bashed for not providing enough information. So, I'm pretty sure I'll get picked on for too many words if anything!!?! Lol
Thank you, in advance for your help!
Olivia;-).

Ouch.
Not easily. You could try data recovery software... maybe SubRosaSoft's File Salvage or the like.

Client unable to get IP address on guest wlan

Hi all, I recently setup a 2504 WLC that has two primary WLANs (internal and guest) which get their IP addresses from a central DHCP server using the local router's broadcast forwarding. Things seem to be working well for the internal wlan, but clients on the guest wlan don't seem to be getting IP addresses. If I give the client a static IP they are able to communicate across the wlan okay.
It is worth noting that I am using LAG between the controller and router and this guest wlan is really just a regular wlan (with PSK) that has an access-list applied to force it to the internet only. The access-list should be allowing dhcp requests through, but in any case, I removed the access-list and it made no difference.
Here is a debug client for a machine connected to the guest vlan (vlan 33). The internal wlan is on the 10.10.10.0/24 network (same as wired and same that the AP's are connected to) and the guest wlan is 10.33.0.0/16.     I don't understand why I am seeing the dhcp request come from the internal vlan/wlan first and it gets an IP address on this network. I then see a request on the guest wlan/vlan at which point it appears to get a valid IP address on the guest network (10.33.0.0), but the client never sees this.
Thoughts?
Thanks,
Bryan
(Cisco Controller) >debug client 8c:2d:aa:36:ca:a3
*DHCP Socket Task: Feb 25 00:49:32.991: 8c:2d:aa:36:ca:a3 DHCP received op BOOTREQUEST (1) (len 308,vlan 1, port 13, encap 0xec03)
*DHCP Socket Task: Feb 25 00:49:32.991: 8c:2d:aa:36:ca:a3 DHCP processing DHCP DISCOVER (1)
*DHCP Socket Task: Feb 25 00:49:32.991: 8c:2d:aa:36:ca:a3 DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 25 00:49:32.991: 8c:2d:aa:36:ca:a3 DHCP   xid: 0xbcf5ea3c (3170232892), secs: 0, flags: 0
*DHCP Socket Task: Feb 25 00:49:32.991: 8c:2d:aa:36:ca:a3 DHCP   chaddr: 8c:2d:aa:36:ca:a3
*DHCP Socket Task: Feb 25 00:49:32.992: 8c:2d:aa:36:ca:a3 DHCP   ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 25 00:49:32.992: 8c:2d:aa:36:ca:a3 DHCP   siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 25 00:49:32.992: 8c:2d:aa:36:ca:a3 DHCP successfully bridged packet to DS
*DHCP Socket Task: Feb 25 00:49:32.992: 8c:2d:aa:36:ca:a3 DHCP received op BOOTREPLY (2) (len 331,vlan 1, port 13, encap 0xec00)
*DHCP Socket Task: Feb 25 00:49:32.993: 8c:2d:aa:36:ca:a3 DHCP processing DHCP OFFER (2)
*DHCP Socket Task: Feb 25 00:49:32.993: 8c:2d:aa:36:ca:a3 DHCP   op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 25 00:49:32.993: 8c:2d:aa:36:ca:a3 DHCP   xid: 0xbcf5ea3c (3170232892), secs: 0, flags: 0
*DHCP Socket Task: Feb 25 00:49:32.993: 8c:2d:aa:36:ca:a3 DHCP   chaddr: 8c:2d:aa:36:ca:a3
*DHCP Socket Task: Feb 25 00:49:32.993: 8c:2d:aa:36:ca:a3 DHCP   ciaddr: 0.0.0.0, yiaddr: 10.10.10.165
*DHCP Socket Task: Feb 25 00:49:32.993: 8c:2d:aa:36:ca:a3 DHCP   siaddr: 10.10.10.246, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 25 00:49:32.993: 8c:2d:aa:36:ca:a3 DHCP   server id: 10.10.10.246 rcvd server id: 10.10.10.246
*DHCP Socket Task: Feb 25 00:49:32.993: 8c:2d:aa:36:ca:a3 DHCP successfully bridged packet to STA
*DHCP Socket Task: Feb 25 00:49:32.994: 8c:2d:aa:36:ca:a3 DHCP received op BOOTREPLY (2) (len 308,vlan 33, port 13, encap 0xec00)
*DHCP Socket Task: Feb 25 00:49:32.994: 8c:2d:aa:36:ca:a3 DHCP processing DHCP OFFER (2)
*DHCP Socket Task: Feb 25 00:49:32.994: 8c:2d:aa:36:ca:a3 DHCP   op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 25 00:49:32.994: 8c:2d:aa:36:ca:a3 DHCP   xid: 0xbcf5ea3c (3170232892), secs: 0, flags: 0
*DHCP Socket Task: Feb 25 00:49:32.994: 8c:2d:aa:36:ca:a3 DHCP   chaddr: 8c:2d:aa:36:ca:a3
*DHCP Socket Task: Feb 25 00:49:32.994: 8c:2d:aa:36:ca:a3 DHCP   ciaddr: 0.0.0.0, yiaddr: 10.33.1.1
*DHCP Socket Task: Feb 25 00:49:32.995: 8c:2d:aa:36:ca:a3 DHCP   siaddr: 10.10.10.246, giaddr: 10.33.0.1
*DHCP Socket Task: Feb 25 00:49:32.995: 8c:2d:aa:36:ca:a3 DHCP   server id: 10.10.10.246 rcvd server id: 10.10.10.246
*DHCP Socket Task: Feb 25 00:49:32.995: 8c:2d:aa:36:ca:a3 DHCP successfully bridged packet to STA
*DHCP Socket Task: Feb 25 00:49:33.997: 8c:2d:aa:36:ca:a3 DHCP received op BOOTREQUEST (1) (len 308,vlan 1, port 13, encap 0xec03)
*DHCP Socket Task: Feb 25 00:49:33.997: 8c:2d:aa:36:ca:a3 DHCP processing DHCP REQUEST (3)
*DHCP Socket Task: Feb 25 00:49:33.997: 8c:2d:aa:36:ca:a3 DHCP   op: BOOTREQUEST, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 25 00:49:33.997: 8c:2d:aa:36:ca:a3 DHCP   xid: 0xbcf5ea3c (3170232892), secs: 1, flags: 0
*DHCP Socket Task: Feb 25 00:49:33.997: 8c:2d:aa:36:ca:a3 DHCP   chaddr: 8c:2d:aa:36:ca:a3
*DHCP Socket Task: Feb 25 00:49:33.997: 8c:2d:aa:36:ca:a3 DHCP   ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 25 00:49:33.997: 8c:2d:aa:36:ca:a3 DHCP   siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 25 00:49:33.997: 8c:2d:aa:36:ca:a3 DHCP   requested ip: 10.10.10.165
*DHCP Socket Task: Feb 25 00:49:33.997: 8c:2d:aa:36:ca:a3 DHCP   server id: 10.10.10.246 rcvd server id: 10.10.10.246
*DHCP Socket Task: Feb 25 00:49:33.997: 8c:2d:aa:36:ca:a3 DHCP successfully bridged packet to DS
*DHCP Socket Task: Feb 25 00:49:33.998: 8c:2d:aa:36:ca:a3 DHCP received op BOOTREPLY (2) (len 308,vlan 1, port 13, encap 0xec00)
*DHCP Socket Task: Feb 25 00:49:33.998: 8c:2d:aa:36:ca:a3 DHCP processing DHCP NAK (6)
*DHCP Socket Task: Feb 25 00:49:33.998: 8c:2d:aa:36:ca:a3 DHCP   op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 25 00:49:33.998: 8c:2d:aa:36:ca:a3 DHCP   xid: 0xbcf5ea3c (3170232892), secs: 0, flags: 8000
*DHCP Socket Task: Feb 25 00:49:33.998: 8c:2d:aa:36:ca:a3 DHCP   chaddr: 8c:2d:aa:36:ca:a3
*DHCP Socket Task: Feb 25 00:49:33.998: 8c:2d:aa:36:ca:a3 DHCP   ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 25 00:49:33.998: 8c:2d:aa:36:ca:a3 DHCP   siaddr: 0.0.0.0, giaddr: 0.0.0.0
*DHCP Socket Task: Feb 25 00:49:33.998: 8c:2d:aa:36:ca:a3 DHCP   server id: 10.10.10.246 rcvd server id: 10.10.10.246
*DHCP Socket Task: Feb 25 00:49:33.998: 8c:2d:aa:36:ca:a3 DHCP successfully bridged packet to STA
*DHCP Socket Task: Feb 25 00:49:34.000: 8c:2d:aa:36:ca:a3 DHCP received op BOOTREPLY (2) (len 308,vlan 33, port 13, encap 0xec00)
*DHCP Socket Task: Feb 25 00:49:34.000: 8c:2d:aa:36:ca:a3 DHCP processing DHCP NAK (6)
*DHCP Socket Task: Feb 25 00:49:34.000: 8c:2d:aa:36:ca:a3 DHCP   op: BOOTREPLY, htype: Ethernet, hlen: 6, hops: 0
*DHCP Socket Task: Feb 25 00:49:34.000: 8c:2d:aa:36:ca:a3 DHCP   xid: 0xbcf5ea3c (3170232892), secs: 0, flags: 8000
*DHCP Socket Task: Feb 25 00:49:34.000: 8c:2d:aa:36:ca:a3 DHCP   chaddr: 8c:2d:aa:36:ca:a3
*DHCP Socket Task: Feb 25 00:49:34.000: 8c:2d:aa:36:ca:a3 DHCP   ciaddr: 0.0.0.0, yiaddr: 0.0.0.0
*DHCP Socket Task: Feb 25 00:49:34.000: 8c:2d:aa:36:ca:a3 DHCP   siaddr: 0.0.0.0, giaddr: 10.33.0.1
*DHCP Socket Task: Feb 25 00:49:34.000: 8c:2d:aa:36:ca:a3 DHCP   server id: 10.10.10.246 rcvd server id: 10.10.10.246
*DHCP Socket Task: Feb 25 00:49:34.000: 8c:2d:aa:36:ca:a3 DHCP successfully bridged packet to STA
*apfMsConnTask_1: Feb 25 00:49:35.320: Stats update: Non Zero value

One way to test also is to connect a laptop to a port assigned for the guest vlan. If the device gets an IP, then it's something on the WLC you have to configure. If the device doesn't, then it's a network issue or dhcp server issue.
Sent from Cisco Technical Support iPhone App

I want to get rid of my guest user account. It will not let me delete it from the user

I did not have the guest user account available and then after I changed some of my setting for my mail, I noticed that when I logged back in the guest user icon was present. I do not want to have this guest user account on my log in screen. I tried to delete it from my system preferences but all it does is disable the guest user but the icon still appears. I need some help!

http://osxdaily.com/2011/10/13/disable-guest-user-account-mac-os-x-10-7-2-login- screen/
Thanks to Brad Caldwell for the questions and screenshot via Twitter, you can follow us there too.
How to disable that “Guest User” from appearing at the OS X 10.7.2 login screen
Open System Preferences
Click on “Security & Privacy”
Click the lock in the lower corner and type in your administrative password to unlock the control panel
Check the box next to “Disable restarting to Safari when screen is locked”
This prevents the Guest User account from being visible at the login screen both during reboot and at the login screen. Again, it’s highly recommended to keep this enabled for security purposes, but if your Mac is locked down with a security cable or you don’t have any use for Find My Mac, you could disable this and not feel too bad about it.

My daughter is trying to connect to a guest wifi account and she is having trouble

my daughter is trying to connect to a guest wifi account and she is having trouble

Does the iOS device connect to other networks?
Does the iOS device see the network?
Any error messages?
Do other devices now connect?
Did the iOS device connect before?
Try the following to rule out a software problem:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Power off and then back on the router
- Reset network settings: Settings>General>Reset>Reset Network Settings
- iOS: Troubleshooting Wi-Fi networks and connections
- Wi-Fi: Unable to connect to an 802.11n Wi-Fi network
- iOS: Recommended settings for Wi-Fi routers and access points
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.

How to retrieve guest user account backup

I have an iMac and a time capsule. A large number of pictures were loaded into I Photo in the guest account of my iMac. I cannot now find these pictures as I understand that guest accounts are wiped clean each time the guest account is lodged out from.
Given that we did not log out from the quest account for a couple of days, i am hopeful that the guest account was backed up by time capsule. I cannot find the guest account on the backed up time capsule. Does anyone have any suggestions whether TC backs up the guest account and if so, how can I locate it in TC.
Thanks very much. David

Did you have the main account logged in as well as guest at the time? Do you have TM setup in the guest account?
It is very unlikely TM backed it up. If it did simply mount the sparsebundle in finder and go through all the folders until you find the guest user account and check if there is anything there. If not sorry it was never backed up.
The only solution I can see if to use a recovery software for the camera. Whatever source of the photos was.. stop using the memory card in that camera now.. use the recovery software as the files will be there until overwritten for the next lot of pictures.
Pondini has all the info for recovery of files from TM.
See Q15 here. http://pondini.org/TM/FAQ.html
There is a section for iphoto.. but IMHO it won't be backed up.

How to disable guest user account on iMAC

I upgraded to Lion and now I have a guest user account on the log in screen. I want to disable this account. How do I get rid of it?

System Preferences > Users & Groups > Guest User (you may need to authenticate) and uncheck "Allow guests to log in to this computer".

How to delete Guest User Account

I just got my Mac book Pro and I'm new to Mac. I created a Guest User Account and now I want to delete it. But the - (minus) option is grey out. How can I delete the Guest User Account? I have two accounts listed right now. The Admin and the Guest Account. Thanks for your help.
p.s. I just found out I couldn't even open the folders under the Guest directory! How come? I am the Admin and should be able to do that. What did I do wrong? Help!!!

I should also say that sometime in the future you might have a problem with something, and one of the first things you should test is, do you have the same problem in another account, so having a Guest Account is a good thing.
You just log in as Guest and test to see if you have the same problem. So it might be a good idea to leave it active, for it takes up very little space. I always have more than one Account, and this new Guest Account sounds good to me, I like the idea that everything is deleted after log off.

Guest WLAN accounts

Similar Messages

Maybe you are looking for