Administrator Guide

The additional guest licenses that High Capacity Guest mode provides must be purchased and applied.
An additional consideration to keep in mind is that the W-ClearPass Policy AAA licensing is reset on a daily basis.
For example, if you purchase 8,000 Guest licenses for a W-ClearPass 5K hardware appliance (CP-HW-5K), you
would be entitled to process 8,000 unique endpoints/guests per day.
EAP-PSK Protocol
When High Capacity Guest mode is enabled, EAP-PSK, a preshared key extensible authentication protocol is
available. EAP-PSK is a method for mutual authentication and session key derivation using a preshared key
(PSK). EAP-PSK provides a protected communication channel for both parties to communicate over when
mutual authentication is successful.
EAP-PSK is well suited to a CPPM node running in High Capacity Guest mode. It simplifies the deployment of a
guest network that is "open" in that the user ID and password are the same for each user, but secure as each
guest/endpoint uses a unique per-endpoint Wi-Fi Protected Access (WPA) preshared key. The client doesn’t
need to support anything more than WPA-PSK.
Enabling High Capacity Guest Mode
When nodes are enabled for this mode, they can only be clustered with nodes that are also in High Capacity Guest
mode. Adding a High Capacity Guest mode-enabled node to a cluster in which High Capacity Guest mode is not
enabled on all the other nodes is not supported.
To enable High Capacity Guest mode:
1. Enable W-ClearPass Insight on at least one node in the cluster.
2. Navigate to Administration > Server Manager > Server Configuration > Cluster-Wide Parameters.
3. Select the Mode tab.
The screen shown in Figure 143 appears.
Figure 143 Enabling High Capacity Guest Mode
4. To enable High Capacity Guest mode, select TRUEfrom the drop-down, then click Save.
Dell Networking W-ClearPass Deployment Guide Deploying W-ClearPass Clusters | 159