4.6.6. Operation

Guest Operation involves executing the Guest Wired workflow, which was set up in the administration section with E-mail Identification.

First, on a guest device connected via a wired connection, open a browser and enter the Captive Portal IP.

https://<Captive_Portal_IP>/

All available workflows in the domain are displayed in the Captive home. Click the Start button of the sing the Guest Wired workflow to begin this captive execution.

../../_images/guest_ex8.png


Note

In case there is only one workflow, the Captive Portal will start with that workflow automatically.

The workflow will begin, displaying the different steps required based on its configuration.

../../_images/guest_ex9.png


1. The first step is Authentication. This tab displays all fields required for the authentication. In this example you only have to introduce the Email.

../../_images/guest_ex.png


2. After submitting the authentication details, you will have to confirm your e-mail to validate the authorization request.

../../_images/guest_ex5.png


3. The ON Captive > Captive e-mail validation requests, displays the requests awaiting validation. The status of the request will show as STARTED, indicating that it is still pending approval.

../../_images/captive_email_menu.png


4. Next, check your email inbox for a message from captive@opencloudfactory.com and confirm the message.

../../_images/guest_ex3.png


5. Once the email is confirmed, the workflow moves to the Authorization step.

../../_images/guest_ex10.png


6. At this point, the status of the request will change to PENDING SPONSOR. The sponsors will receive an email from captive@opencloudfactory.com informing them that a request is awaiting approval.

Any sponsor can approve the request by clicking the Approve request button, changing the status to APPROVED.

7. The next step is the Agent Download. There will be two links: one to download the Soluble Agent if it is not already installed, and another to run the Agent if it is already installed in the device.

../../_images/guest_ex11.png


Once the soluble agent is running, it will evaluate the necessary information to allow access to the next step.

../../_images/guest_ex6.png


8. Finally, you will reach the Finish step, where the system will welcome you to the network and redirect you to the specified link (in this case, www.google.com).

../../_images/guest_ex12.png


In the ON NAC > Business Profiles section, you will see an entry reflecting the completed process.

../../_images/guest_ex13.png


The matched policy is Guest compliance, and it has tags associated to the policy:

  • ONC_WEBAUTH_APPROVED: Indicates that the workflow is completed.

  • EPC_FULL_COMPLIANCE: Ensures compliance with the Captive Portal configuration.

  • ONC_CAPTIVE_GUEST: Identifies it as a guest workflow.

The authentication source is MAB, as outlined in the policy, and the precondition assigns the device to the Service VLAN, as shown in the image above.