Configuring the guest network
Article Number: 1654 | Last Updated: Tue, Jul 7, 2015 1:52 PM
Guest network overview
Watch the Configuring the guest network video.
The guest network in Kerio Control offers your company's guests Internet access secured by Kerio Control.
Users connected through the guest network are fully secured by Kerio Control, except that Kerio Control Web Filter is disabled in the guest network.
Assigning guest interfaces
To create a guest network move an existing interface to the Guest Interfaces group.
To learn how to add a new interface to the Interfaces section, read Configuring network interfaces.
To add one or more interfaces to the Guest Interfaces group:
Kerio Control creates the guest network and your guests can now connect to your company's Internet connection.
Setting DHCP scope
Interfaces from the Guest Interfaces group behave just like any interface from the Trusted/Local Interfaces or Other Interfaces group.
If the DHCP server in Kerio Control is enabled and you use automatic mode, the scope will be generated automatically. If you configure DHCP scopes manually, you must create a new one for each guest network.
Read more in Using DHCP module.
Customizing the welcome page
When your guests access the Internet via the guest network, they see a welcome page. You can customize the page in Kerio Control, but you cannot disable it.
Your guests now see this text on the welcome page.
Creating HTML content in your Welcome page
You can format the page in HTML.
You can also add links to external websites accessible via HTTP (for example: <a href='http://www.example.com'>HTTP link</a>). These web pages are accessible even without clicking on the Continue button. However, ensure that the linked pages do not require any external content (scripts, fonts, etc.), because this content will not be available.
Setting shared password for guest users
To set up a password guests can use to access the Internet via the guest network, customize it in Kerio Control:
Your guests must login with the password to access the Internet via guest network by typing the password on the welcome page.
Traffic rules for the guest network
Traffic rules in Kerio Control include two rules that concern guest interfaces.
In the Internet access (NAT) outgoing rule, all guest interfaces are included.
The Guests traffic rule allows the traffic from all guest interfaces access to the firewall with a Guest services group.
Guests can access the firewall and Internet only. This is a hard-coded behavior. Traffic rules cannot override it.