4.6.6. Operation

In this case we are going the see the execution of a Guest workflow. This workflow is the Guest_Wired configured in the use case advanced operations with E-mail Identification.

First, we need to go to an explorer in our guest connected by wire. Then, we need to enter the Captive portal IP, in our case:

https://10.10.36.89

We can see all the workflows in the domain. Our workflow is the Guest Wired so we will click on the Start button.

../../_images/guest_ex8.png


The workflow will start, and we will see the different steps we need to pass according to the configured.

../../_images/guest_ex9.png


The first step is Authentication. On this tab we will find all the form fields configured in our workflow. In this case we only have to introduce the email with which we want to authenticate.

../../_images/guest_ex.png


When the form is submitted, we will pass to the next step called Confirm e-mail.

../../_images/guest_ex5.png


If we go to ON Captive -> Captive e-mail validation requests, we will see that the request will be created. The status of the request is STARTED and we can’t approve it yet.

../../_images/guest_ex2.png


So the first thing that we have to do is to go to our e-mail and confirm the message we have received, in this case, from captive@opencloudfactory.com.

../../_images/guest_ex3.png


When the message is confirmed, we will pass to the Authorization step.

../../_images/guest_ex10.png


We will see that now the status is changed to PENDING SPONSOR.

../../_images/guest_ex4.png


First, the sponsors will receive an e-mail from captive@opencloudfactory.com acknowledging that a request is pending.

../../_images/guest_ex7.png


Any sponsor can approve the request by clicking the Approve request button. The status will change to APPROVED.

When this happens, we will move to the Download Agent step. There are two links, the first one is to download the soluble agent if it is not installed, and the second one is about running the soluble agent if it is already installed.

../../_images/guest_ex11.png


When the soluble agent is running, it will evaluate the information to allow the access to the next step.

../../_images/guest_ex6.png


Finally, we will go to the Finish step.

../../_images/guest_ex12.png


It will welcome us to the network and redirect us to the link specified. In our case www.google.com.

If we go to ON NAC -> Business Profiles, we will see an entry like the following one:

../../_images/guest_ex13.png


The policy matched is Guest compliance, that we have configured in the advanced operation of this module.

We can see three tags of that policy:

  • ONC_WEBAUTH_APPROVED: Indicates that the workflow is finished.

  • EPC_FULL_COMPLIANCE: Compliance tag that needs to match with the captive portal configuration.

  • ONC_CAPTIVE_GUEST: Indicates that is a guest workflow.

The source is MAB, like in the policy, and the precondition sets the device to the Service VLAN, as we can see in the image above.