Role availability under DPSK batch generation
Summary
This article explains how to make roles available under the DPSK generation section.Question
Why don't I see any role under the Role dropdown when I tried to create a batch of DPSKs?Customer Environment
ZD managed AP environmentRoot Cause
None of the ZD roles have RBAC (Role Based Access Control) enabledTroubleshooting Steps
ZoneDirector allows generation of DPSKs prior to their usage. A user need not connect to a portal such as guest/hotspot or an external portal to request a DPSK in order to connect to a Zero-IT enabled SSID.A role can be assigned to a user based on the privileges assigned in the backend user database (such as Active Directory, RADIUS, etc.) ZD will retrieve those user level attributes as part of the user authentication process. Those attributes will be matched against the group attributes configured under each role. If they match, corresponding role will be assigned to that user.
To generate DPSKs in a batch with corresponding role assignment, following settings must be in place:
1. A Zero-IT SSID with DPSK setting enabled.
2. Role Based Access Control must be enabled under the SSID's advanced settings (as well as the dynamic VLAN setting)
3. A user role configuration must have this SSID enabled
4. This user role must also have the Role Based Access Control option enabled
With these settings in place, admin can generate DPSKs using the "Dynamic PSK Batch Generation" feature on the WLANs configuration page. Here are the steps:
1. Choose the target SSID (if there are 2 or more Zero-IT enabled SSIDs)
2. Input the desired number of DPSKs
3. Choose the role (if there are 2 or more RBAC enabled roles)
4. Click on the "Generate" button
5. Optionally if you want to see the generated DPSKs in a CSV format, you can click on the "To download the generated DPSK record, click here" link.
Article Number:
000002768
Updated:
December 24, 2018 09:44 AM (almost 6 years ago)
Tags:
Configuration, ZoneDirector
Votes:
1
This article is:
helpful
not helpful