Overview
The guest network in Kerio Control offers the company's guests Internet access secured by Kerio Control. Guests can connect to your network without a Kerio Control username and password or it's possible to set a shared password for accessing the Internet via a guest network. Guests are not counted as licensed users.
Kerio Control gathers statistics for the guest network under the built-in Guest users' account.
Users connect to the guest network from a welcome page. Kerio Control redirects guest network users to the welcome page after 2 hours of inactivity.
Important: Users connected through the guest network are fully secured by Kerio Control, except that Kerio Control Web Filter is disabled in the guest network.
Solution
Assigning guest interfaces
To create a guest network move an existing interface to the Guest Interfaces group.
To add one or more interfaces to the Guest Interfaces group:
- In the administration interface, go to Interfaces.
- Find the interface created for guests.
- Drag that interfaces to the Guest Interfaces group.
- Click Apply.
Kerio Control creates the guest network and your guests can now connect to your company's Internet connection.
Setting DHCP scope
Interfaces from the Guest Interfaces group behave just like any interface from the Trusted/Local Interfaces or Other Interfaces group.
If the DHCP server in Kerio Control is enabled and you use the automatic mode, the scope will be generated automatically. If you configure DHCP scopes manually, you must create a new one for each guest network.
Customizing the welcome page
When your guests access the Internet via the guest network, they see a welcome page. You can customize the page in Kerio Control, but you cannot disable it.
- In the administration interface, go to Domains and User Login.
- On the Guest Interfaces tab, type your own welcome text.
Note: You can format the message in HTML. You can also add links to external websites accessible via HTTP (for example:
<a href='http://www.example.com'>HTTP link</a>
). These web pages are accessible even without clicking on the Continue button. However, ensure that the linked pages do not require any external content (scripts, fonts, etc.) because this content will not be available.
Additionally, you can add a custom logo in the Advanced Options > Web Interface section. - Click Apply.
Your guests now see this text on the welcome page.
Setting a shared password for guest users
- In the Kerio Control administration, go to Domains and User Login.
- On the Guest Interfaces tab, check the Require users to enter password option.
- In the Password field, type the password. All guests must use this password to access the Internet via the guest network.
- Click Apply.
Your guests must log in with the password to access the Internet via guest network by typing the password on the welcome page.
Traffic rules for the guest network
Traffic rules in Kerio Control include two rules that concern guest interfaces.
In the Internet access (NAT) outgoing rule, all guest interfaces are included.
The Guests traffic rule allows the traffic from all guest interfaces access to the firewall with a guest services group.
Important: Guests can access the firewall and Internet only. This is hard-coded behavior. Traffic rules cannot override it.
Testing
Kerio Control creates the guest network and your guests can now connect to your company's Internet connection.