Profile Services Configuration And Deployment Considerations - Motorola WiNG 5.5 Reference Manual

5.2.10.1 Profile Services Configuration and Deployment Considerations

Profile Services Configuration
Before defining a profile's captive portal and DHCP configuration, refer to the following deployment guidelines to ensure the
profile configuration is optimally effective:
• A profile plan should consider the number of wireless clients allowed on the profile's guest (captive portal) network and the
services provided, or if the profile should support guest access at all.
• Profile configurations supporting a captive portal should include firewall policies to ensure logical separation is provided
between guest and internal networks so internal networks and hosts are not reachable from guest devices.
• DHCP's lack of an authentication mechanism means a DHCP server supported profile cannot check if a client or user is
authorized to use a given user class. This introduces a vulnerability when using user class options. Ensure a profile using
DHCP resources is also provisioned with a strong user authorization and validation configuration.
Device Configuration 5 - 145