How can I pre-configure one year’s worth of weekly PPSK users?

  • 1
  • Question
  • Updated 4 years ago
  • Answered
I want to pre-configure 52 PPSK users with each account being valid for only 1 week (e.g., guest-01 valid between 8/1 and 8/7, guest-02 valid between 8/8 and 8/15).

I started setting this up in HMOL and it's a bit clunky. I'm creating 52 Local User Groups and setting the Validity Period for each week. I am then going to create 52 Local Users and add one to each of the corresponding groups (e.g., guest-01 user in guest-01 user group). It gets messy when I will have to add the 52 User Groups to the WLAN policy.

I'm wondering if there is a better way to get what I'm looking for.

Any thoughts?
Photo of Kevin Rodgers

Kevin Rodgers

  • 11 Posts
  • 0 Reply Likes

Posted 4 years ago

  • 1
Photo of Crowdie

Crowdie, Champ

  • 972 Posts
  • 272 Reply Likes
In the example below the local user group Guests has been defined to create twenty guest accounts (Private PSK Users to Create per Rotation) every seven days (Private PSK Rotation interval) fifty two times (Private PSK Rotations).  Each of these guest accounts would be valid for seven days (Private PSK Lifetime) so this would give you twenty guest accounts each week for a year.



If you just want one PPSK per week then set the "Private PSK Users to Create per Rotation" to one. 

In the SSID definition make sure that you set the maximum number of concurrent connections you want to support per PPSK.

Now you just need to add the "Guests" local user group to the network policy:



Hopefully that helps.
(Edited)
Photo of Kevin Rodgers

Kevin Rodgers

  • 11 Posts
  • 0 Reply Likes
Thanks, Crowdie.

I considered this approach and it would be a lot simpler than manually creating 52 keys. However, I'm also looking to export the keys for the entire year. I want to add them to our helpdesk system so at any given time, authorized users can log in and request the current week's PPSK. I'd prefer not to have them log in to HMOL to reveal the keys.

Is there a way to have the generated PPSK's automatically exported to a list or sent by email? I know I can log in to reveal the keys, but I'm hoping to automate the whole process.