38.9 Guest Login Management
38.9.1 Account Management
For external devices that temporarily need to access the network protected by the access device, but cannot install the client, a guest account can be provided. When the device is blocked and redirected to the system's warning page, the guest can enter the guest account and password for authentication. Upon successful login, the device can access the network.
Guest accounts are temporary. If there is no network activity within a certain period after successful login, the authentication will expire, and the user will need to authenticate again for the next visit.
In "Guest Login Management -> Guest Management," you can manage guest accounts, including adding, deleting, enabling, or disabling accounts, as well as modifying guest account details. When adding a guest account, the following options are available:
| Settings |
Description |
| Account |
Guest account information settings |
| Username |
The name of the guest account, required |
| Password |
The password for the guest account, required, cannot be empty |
| Remarks |
Additional remarks for the guest account, optional |
| Validity Period |
The duration during which the guest account is valid |
| Login |
Guest login settings |
| Allow Single Login |
If unchecked, the guest account can log in from multiple IPs. If checked, the guest account can only log in from one IP at a time. |
| Allow Login Only from Specified IP |
If unchecked, the guest account can log in from any IP. If checked, and a specific IP is set, the guest account can only log in from that IP. |
| Do Not Allow Login on Non-Compliance Clients |
If unchecked, the guest account can log in from non-compliant clients. If checked, the guest account cannot log in from non-compliant clients. |
Note
Machines set to the blacklist cannot allow guest logins.
38.9.2 Access Scope
Once a guest is granted access, by default, they can access all networks protected by the entry gateway. To restrict the networks accessible by the guest account, go to Guest Login Management -> Access Scope.
| Setting |
Description |
| Action |
Choose either "Deny" or "Allow". |
| IP Address |
Input the access range, supporting IP segments. Use commas to separate multiple ranges, e.g., 192.168.1.1-192.168.1.100,192.168.2.102. |
| Remark |
Optional remark for the entry. |
Note
Multiple access ranges can be set. New settings are added at the end of the list. Matching is performed from top to bottom, meaning once an IP matches the first rule, no further matching occurs.
38.9.3 Guest Settings
Go to Guest Login Management -> Guest Settings to configure the guest authentication mechanism.
| Setting |
Description |
| Login Validity Time |
After the guest's network activity stops for the specified time, the current authentication will expire. The next access will be blocked, requiring re-authentication. The default is 5 minutes. |
| Guest Log Cleanup |
By default, guest logs are not cleared. Check this option and set a time to automatically delete guest logs older than the specified number of days. |
38.9.4 Guest Logs
Go to Guest Login Management -> Guest Logs to view the logs of guest accounts, providing audit evidence. The guest log includes the following details:
| Attribute Name |
Description |
| Time |
The time when the guest account performed the related action. |
| IP Address |
The network address from which the guest account performed the action. |
| Type |
The type of guest login: account authentication or SMS verification. |
| Account |
The guest account name. |
| Action |
The type of action: login or logout. |
38.9.5 Guest Administrator
Supports individual management of guest accounts.
Guest Administrator Account Management
Enter http://<Access Gateway IP>/Set in the browser to log into the guest administrator account management page. By default, there is only one guest administrator account, visitor, which can be enabled or disabled on this page. The password can also be reset, and after resetting, the password will be blank.
Guest Management
Enter http://<Access Gateway IP>/Visitor in the browser to log into the guest management page. Since there is only one independent guest administrator account, visitor, log in using that account's password. The initial password for visitor is blank. Upon first login or after resetting the password, you will be redirected to change the password. After the password is successfully updated, you will directly enter the guest management page.
The operations on the independent guest management page are the same as those in the main administrator interface.
Note
The access URLs for the guest administrator account page and the independent guest management page are case-sensitive.
Don't see what you're looking for?
