AMIGOPOD PowerConnect W Clearpass 100 Software Quick setup guide

amigopod and colubris integration
amigopod
1. Ensure that you have the latest version of amigopod software by navigating to the plugin manager
from the administrator menu. Click on check for updates and install any new updates
2. Navigate to Radius services, NAS devices and add the IP address of your colubris gateway and
enter a shared secret. Make sure after you save that you click to restart the radius server
In this example we will use the following Ip addresses
amigopod: 10.1.1.204
colubris: 10.1.1.222
3. Click on user roles and delete all of the existing roles (guest, contractor, employee)

4. Now click on Create Role, and fill in the following parameters which will define the generic user
access policies. In this example we will create a single guest policy which allows http and SSL traffic
Note that you will have to add the attribute values one by one from the following dictionaries
Standard Radius Dictionary:
Attribute Name Value
Service-Type Administrative-user
Colubris dictionary:
Attribute Name Value
Colubris-AVPair default-user-acct-interim-update=600
Colubris-AVPair default-user-idle-timeout=3600
Colubris-AVPair access-list=guest,ACCEPT,tcp,all,80
Colubris-AVPair access-list=guest,ACCEPT,tcp,all,443
This defines a policy called 'guest' which allows TCP port 443 and 80 traffic to all destinations. If you want to
restrict or add any more firewall policies, simply edit using the following syntax
access-list=guest,action,protocol,address,port
For example, to add a new firewall rule in the guest role to allow telnet access to the server 10.3.2.1
access-list=guest,ACCEPT,tcp,10.3.2.1,23
If you want to have different types of roles eg. contractor, simply follow the syntax but use the name eg.
'contractor' instead of guest and add the required firewall rules
5. Now you need to create the role for 'guest' (and any other roles you have defined in step 4. Simply
create a new role, give it a name eg. guest and define the attribute as per the screenshot below.
Colubris dictionary:
Attribute Name Value
Colubris-AVPair use-access-list=guest

6. Now we need to create a colubris administrative user in amigopod with the role ColubrisService that
was created earlier
Note that you should change the password and set the exiration time to 'Never' by editing the account once
you have created it. This can be done by clicking on 'List Accounts' from guest manager and editing the
[email protected] account.

Colubris Configuration:
1. You need to create a radius profile. Under Security-Radius, create a new Radius profile. Put in the
IP address of the amigopod and the same shared secret that you used when defining the NAS
earlier. Set the authentication method to 'CHAP' and leave all other settings as default
2. Under 'Public Access->Attributes' select the amigopod radius profile you created, and put in the
username and password for the [email protected] account you created in amigopod. Make
sure you tick the 'Accounting' checkbox
3.
3. We now need to enable captive portal authentication under the VSC donfiguration from the left hand
menu. Clickl on the VSC group (in this example the default Colubris Network). Scroll down to the
HTML based user logins and check Radius Authentication (and select amigopod radius) and select
Radius Accounting (and select amigopod radius)

Testing:
You are now complete with the setup and are ready to create visitor accounts on amigopod
You should
now be able to
log in through the colubris captive portal, enter your username and password and be authenticated into a
guest role that only allows HTTP and SSL traffic

Captive Portal Configuration
1. amigopod can be configured to host the captive portal, providing a consistant look and feel utilising
available amigopod skins. This is done very simply on colubris by configuring additional attributes
In this example, the amigopod IP address is 10.1.1.204 and the number 1 corresponds to web login
page number 1 to be used on amigopod (use 1 for the default amigopod skin)
Attribute Name Value (format = http://IP_ADDRESS/weblogin.php/#
LOGIN-PAGE http://10.1.1.204/weblogin.php/1
LOGIN-URL http://10.1.1.204/weblogin.php/1
You can add additional attributes for redirecting of information and error pages
2. On amigopod, browse to Radius Serices – Web Logins and create a new Web Login with the
following details. Make sure to use the IP address of your Colubris controller

3. You can configure the general look and feel of the captive portal using any of the installed skins for
the basic look and feel. Additionally yu can cofigure a custom header, footer and custom visitor login
messages