WRT1900AC Guest Logon

I ran into an interesting problem this evening.  I tried to give my father-in-law access to my "guest network" on his Samsung phone - an Adroid-based device.  I have previously tested the guest network on my Apple iMac and been able to successfully logon via connecting to the appropriate wi-fi "guest" network then opening a browser window and entering the correct guest password.
While his phone appeared to initially connect to the network aftering seeing it as a connection option, opening a browser window did not take him to the Linksys guest password page for some reason.  This inabilty to enter a password eventually failed to allow the wifi connection to work and prompted a connection error message.  I tried to disable access to the internet from his cellular network, ask his phone to forget my "guest network", then reconnect to the "guest" via wifi to force the phone to use wifi as the primary means of internet/network connection, but to no avail.
Has anyone encoutered this challenge?  I'm hoping to try re-connecting his phone when he comes over next weekend.

jdsmucker wrote:
I guess I should also ask...do I need to put the guest's device MAC id into the system if I'm using MAC filtering for security?  I wasn't sure if MAC filtering (which I current use on my non-guest SSID connections) applies also to the "guest" network if it is enabled?
Hi. Mac filtering is not applicable for guest network because it is not using the same IP address for us to access the Linksys Smart Wifi page. The guest access is already secured in a way that the IP address is not the same with that of the main network. Therefore the people who has access to your guest network will be unable to connect to your main WiFi network. The guest devices connected has IP address of 192.168.1.33 (by default). I guess this also answers the question above about putting the MAC address of the guest computers on the MAC filter tab of the smart wifi router as they are not even seeing each other on the same network. Check this link for more info: http://kb.linksys.com/Linksys/ukp.aspx?vw=1&docid=b8a51120f90e4dc1809731561e5f102a_Configuring_wirel...
On the other hand, this router supports both guest and wireless security at the same time. For example, one laptop can connect to a guest network without having to type any password upon using the WiFi utility of the computer/device. It will only ask for a password once you're already about to open a website in your browser. Check this out: http://kb.linksys.com/Linksys/ukp.aspx?pid=80&vw=1&articleid=21449

Similar Messages

  • Wireless Guest logon - timeout period ?

    Hello,
    When i am authenticated via an Internal Web Page on a Wifi Achor Guest solution, how long is my logon valid with no activity ?
    Which parameter determines this period ? The "session timeout" parameter on the Anchor Controller ?
    If i disable "session timeout" on the Anchor, then there is no Wifi Guest timeout ?
    regards,
    Geert

    Thanks. I guess there is no possibility to completely disable the timeouts, or make them for example 1 month/2 weeks ?
    I am asking this because some of our "guest" users are nearly servers that require constant internet connectivity.

  • WRT1900AC Guest Network connection time limit

    I think this is a fresh topic.
    I have searched for this, but can't find any prior topics.
    I upgraded from a Cisco branded E4200 (v1) to a Linksys WRT1900AC.
    I have noticed that the guest network for the 1900AC kicks devices off after a period of time I have not managed to determine, despite them not being disconnected from the network. The device will simply tell me that a hotspot is detected and asks me to sign in. I have to open the browser and enter the password again. This is particularly annoying for work devices on the guest network that use VPN, as I have to get that running as well.
    The E4200 I had before kept guests connected as long as they were on the network; only disconnecting them or taking them out of range for more than a day required me to supply the password again.
    Is this expected behaviour? I'd prefer not to be repeatedly challenged for the guest password for devices that remain connected, just like I could with the E4200.
    I use the 5GHz network for all my permanently connected devices ( a mixture of fixed and dynamic IP's) and leave guests and my work devices to the guest network on 2.4GHz (all dynamic IP's). I have things spaced out well in my home as I had run into issues with interference caused to my Sonos system, which I have eliminated by moving my 2.4GHz connected equipment. The physical layout is the same from when I had my E4200 and my 1900AC, so I'm confident it isn't a physical issue.
    My 2.4GHz network has its SSID hidden to discourage people from using it.

    How many total guests allowed did you set on your router? Make sure that the total number of devices connecting to the Guest network would match the total guests allowed. 

  • External Portal - userIDs used by customers? guest logon?

    Hi,
    We want to impliment an external facing Portal where the customers(citizens) will be able to look up their account information via our CRM system.
    Can somebody maybe explain or point me in the direction on how the userID's and licensing will be treated?
    Obviously a customer must log  in from the internet onto his own account and need a userID for this, but is this a standard SAP userID that is created? So do we need the userID in CRM as well? (I would  hoped the Portal will only read the customer data from CRM rather than the user actually logging onto the Portal.
    What are the user licensing implications? We can surely not be expected to have to pay for user licenses for say a million seperate accounts.
    Thanks, any advise will be appreciate.

    Hi Anja,
    Thanks for the reply.
    No, I do not like to have every customer to have an userID (via UME). I would prefer it to be some type of anonymous logon.
    But then again the user must have some type of logon ID, because how will the customer be identified and linked to his/her own utilities account via CRM?
    Basicaly we use IS-U. So we want to allow customers in the future to view and to manage his their account, provide meter readings, etc. Hopefully this makes more sense.
    All advice will be much appreciated.
    Thanks,
    Adriaan

  • WRT1900AC Guest Access

    Hello,
    I notice that the guest access feature only works if the DHCP server on the router is enabled. We have a Windows 2008 domain controller in our network which is hosting the DHCP service and we would rather not change this. Is there any way to make the guest access function work using a DHCP server *not* hosted on the router?
    Thanks

    Not sure if bridge mode would work for you and still allow Guest Zone or not. 
    You could try Cascade mode however this would introduce a 2ndary DHCP subnet on your system I think:
    http://kb.linksys.com/Linksys/ukp.aspx?vw=1&docid=169333b784cf4c78b8db5490f85c518a_Setting_.xml&pid=...
    You might want to phone Linksys support, ask for level 2 support or higher....

  • WRT1900AC Guest Network...

    How is the IP number for the Guest network set?  When I tried this, it came up with 192.168.3.1.  Enabling this feature caused conflicts with other systems that I have in place.  Is there any way to configure/edit this IP range?
    I see this in the output from the sysinfo.cgi script:
    guest_lan_ipaddr=192.168.3.1
    guest_lan_netmask=255.255.255.0

    Hi cw214. The Linksys Wi-Fi Routers and Linksys Smart Wi-Fi Routers use the 192.168.3.x network for Guest access.  The IP address ranges 192.168.33.x and 192.168.3.x are not allowed to be used for the primary network. There's no way you can change or edit that, unless you''ll change the router's IP address. For example, router's IP address is 10.10.10.1 then the guest IP address will also be changed to 10.10.3.x or 10.10.33.x. 

  • Wlc 5508 Guest logon page

    Where do you turn this option off? i have looked under security and did not see any thing.  Thanks

    Wlans -> Security -> Layer 3. ?
    Sent from Cisco Technical Support iPad App

  • Guest Portal Loop

    Hi everyone,
    We are operating a guest wireless network that is using central web authentication, unfortunately intermittently when signing in the user is presented with the logon page again with no error and the user can't proceed any further. Has anyone got some good suggestions on where to start troubleshooting this?
    We leverage ISE 1.2 (Patch 4). We are using a Cisco 3850 as a mobility agent (3.3.3SE), that is connected to a Cisco 5760 as the mobility controller (3.3.1SE) and a Cisco 5508 as the anchor (7.6.100).
    I have attempted different configurations by performing the authentication/accounting only on the anchor 5508. Perform the authentication/accounting only on the 3850. I have also tried ensuring that only one ISE policy node is used and it is the same as the redirect url. Randomly and only for a temporary period, the user will continiously get the guest logon screen and unable to proceed further. The ISE live authentication display doesn't suggest login attempts either.
    Thanks,
    Mark

    Hi,
    It loops back to the portal login page.
    It doesn't display any error regarding incorrect username/password. The state of the connection on the wireless controller continues in the state of central web auth required.
    Thanks,

  • Guest Authentication With Accountability! -HELP CMX vs ISE?

    HI, 
    We currently are in the procurement stage of an upgrade to our wireless solution but are facing a  business requirements that hopefully you guys will be able to help with:-
    Guest authentication with some way of checking the guests are who they say they are (this is for accountability purposes)
    for example we would like something such as a guest logon portal with multiple ways to logon that provides us a credible source of identification for the guests (social media logons, email generated passwords to a valid email account, SMS generated passwords to a valid mobile phone number)
    The above would be much more favorable than the standard web portal / lobby admin access where people could give a bogus name to the lobby admin over the phone.
    We have been recommended cisco's CMX, this seems good on the face of it as it is able to integrate with a few social media platforms but can we set the ability to generate emails and SMS messages with this?
    ISE is also another platform we are trying to be sold but I dont think this really addresses the above business requirement.
    Can anyone offer any advise? 
    Thanks 

    Neither.  Look at PurpleWiFi or Nomadix.

  • Self registered guests on WLAN

    I'm attempting to get several slightly different types of public access web configured on a Cisco WLC 4404.
    the first type is a pre-registration service, whereby the user needs to go to reception or some other designated staff, who configures a user on the WLC for them to log on with. The WLC can do this out of the box without much config and I've got this all working.
    the second is the one I'm having trouble with. I want guests to be able to log on without visiting anyone first (they'll be limited to filtered web browsing only - no VPNs and whatnot). The user would need to go to a splash screen, read an AUP, enter email address, some personal info and choose a password. from that point on they can use the service at will. there'd be no real checks made on the information, i.e. that the email was a valid one.
    I currently have this setup working with a nocat service running on a gateway server and need to pipe a network over to an autonomous AP whenever i need to put this out.
    Can the WLC do this job on it's own? Places like hotels do a similar thing when you get on the wifi and are prompted for your card info - although I just want info for logging purposes - not billing.
    any help or info about similar setups would be great.
    Thanks

    The same web-auth screens where you set up the lobby ambassador/ guest logon configuration, can be set to a "passthrough" mode instead. One of the options in a passthrough setup is an email address entry box, but I've never found where (or even if) those emails are stored. You could consider pointing the passthrough page at an external web server and having the forms saved there.
    As I recall, though, a single controller can only have one instance of web logon settings configured, so you wouldn't be able to run both systems on the same controller.

  • Guest WLAN accounts

    I am working on Guest WLAN deployment using a anchor WLC and NAC Guest Access server for authentication. I now have a requirement to prevent Guest machines from logging in with the same set of credentials. I already have concurrent connections set to 1, but can I easily tie the user credentials to a Guest Machine when they login the 1st time.

    I won't claim to be the expert, but I'm pretty sure that Guest login is a different "security" from your WLAN security.  Whatever settings you use on your WLAN (WPA/WEP/etc.) must be configured in advance on the client in order for the user to connect to your wireless network and get an IP address.  Once connected, the user will open up a browser (which will get redirected) to the guest logon page.  At this point, the client can only resolve DNS and get to your guest logon web page.  Once logged on, the user will be able to actually get somewhere on your wireless network, but the WLAN settings remain the same before, during, and after guest logon.
    Also - if you can implement WCS, WCS will allow you to print or email the credentials.

  • My iMac is not recognizing my logon id, how do I reset it?

    I went to logon to my iMac and it did not recognize my logon. I use a guest logon without admin rights to access the web.  How do I reset the admin logon?

    Your profile is there for a reason, without us knowing the version of OS X you use we can't really help you very accurately. Please complete   your profile. If you happen to use ML or Maverick please click https://discussions.apple.com/docs/DOC-4101
    Good luck.

  • Is there any way to see what Guest connections are active?

    The DHCP reservation popup only shows connections with full access. I can't see any way to see who/what is connected using a Guest logon. Is there any way to do this?

    You can browse it a little more easily with TextWranger. You can also search it:
    http://homepage.mac.com/bagelturf/aparticles/library/libtw/libtw.html
    See what happens when you restore a vault:
    http://homepage.mac.com/bagelturf/aparticles/vaults/vrestore/vrestore.html
    It actually renames your existing library and creates a new one.

  • VLAN Setup – WRT1900AC

     I have a home network that includes a Windows 2012 server running Active Directory.  Because of this, I use my server to provide DHCP and DNS services on the network so I have to disable DHCP services on the WRT.  This in turn prevents me from using the Guest Network services on my WRT1900AC (which is very strange in my opinion!).  anyway…… I’m curious if I can use the VLAN features on the WRT to resolve this in some way?  Shouldn’t I be able to setup one VLAN for my home network, and a 2nd VLAN for the purposes of enabling the Guest network? 

    The WRT1900AC Guest Network doesn't work that why. When you enabled the WRT1900AC Guest Wireless an isolated IP Subnet is created usually 192.168.2.0 and DHCP Server configured to hand out those IP Addresses on the VWLAN Guest wireless specifically for the Guest network client devices.

  • How to permit Google play store access for captive portal guest users?

    Introduction : There could be occasions when we need to permit Google play store access for guest users, A common example could be a hotel environment where unauthenticated users are allowed to access the hotel website and directed to Google play store to download their Apps.
    Environment : This article applies to all controller models and AOS versions 6.1.3.x and higher.
    Configuration Steps :
    The Google Play app store (play.google.com) is a cloud service, and the addresses it uses may change regularly. This presents a challenge to permit access to those ranges. The current solution is to permit these addresses that are known to be used by the Android Marketplace, as shown here:
    .ggpht.com
    android.clients.google.com
    play.google.com
    The configuration is about creating an alias with the above URL’s and a firewall policy where you can permit traffic to the alias.
    Step 1: Create an Alias
    (Aruba3200XM) #configure t
    (Aruba3200XM) (config) #netdestination Google-Play
    (Aruba3200XM) (config-dest) #name android.clients.google.com
    (Aruba3200XM) (config-dest) #name *.ggpht.com
    (Aruba3200XM) (config-dest) #name play.google.com  
     Step 2: Create the session-based access list.
    (Aruba3200XM) (config) #ip access-list session google-play
    (Aruba3200XM) (config-sess-google-play)#user alias Google-Play any permit
    Step 3: Assign the session-based access list to the guest captive portal pre-auth user role.
    (Aruba3200XM) (config) #user-role guest-logon
    (Aruba3200XM) (config-role) #session-acl google-play position 3
    Verification :
    (Aruba3200XM) #show netdestination
    Name: Google-Play
    Position  Type  IP addr   Mask-Len/Range
    1         name  0.0.0.1   android.clients.google.com
    2         name  0.0.0.2   *.ggpht.com
    3         name  0.0.0.3   play.google.com
    (Aruba3200) #show rights guest-logon
    Derived Role = 'guest-logon'
     Up BW:No Limit   Down BW:No Limit
     L2TP Pool = default-l2tp-pool
     PPTP Pool = default-pptp-pool
     Periodic reauthentication: Disabled
     ACL Number = 6/0
     Max Sessions = 65535
     Captive Portal profile = default
    access-list List
    Position  Name              Type     Location
    1         ra-guard          session
    2         logon-control     session
    3         google-play       session
    4         captiveportal     session
    5         v6-logon-control  session
    6         captiveportal6    session
    google-play
    Priority  Source  Destination  Service  Action  TimeRange  Log  Expired  Queue  TOS  8021P  Blacklist  Mirror  DisScan  ClassifyMedia  IPv4/6
    1         user    Google-Play  any      permit                           Low                                                           4
    Troubleshooting :
    Make sure ip name-server, ip domain-name and ip domain lookup are configured on the controller.
    Also you must have a PEFNG license to configure or view a destination.

    Thanks so much getting these names listed out. I have been working on this very issue for a few weeks and was basing my firewall rules on IP's. It was not going well. Now access is working and testing can commence!  Thanks,Chris

Maybe you are looking for