Juniper Networks Mist Access Assurance
Tehnilised andmed
- Toote nimi: Mist Access Assurance Client Onboarding – NAC Portal
- Versioon: 1.0
- Müüja: Juniper
Tooteteave
The Mist Access Assurance Client Onboarding – NAC Portal is a solution provided by Juniper for secure client-driven self-provisioning within organizations. It includes features such as PSK Portal, MPSK, BYOD support, PSK Admin, NAC Portal, EAP-TLS, Marvis Client for various platforms (iOS/iPadOS/Android), and more.
Kasutusjuhised
NAC Portal Configuration
To configure the NAC Portal for client onboarding, follow these steps:
- Navigate to Organization > Certificates and set up Onboard CA Configuration (Active).
- Configure the Onboard Certificate Authority under Onboard CA Configuration.
- Add the NAC Onboarding Portal under NAC settings.
- Set up Portal Settings, including Name, Portal Type, and NAC Portal URL.
- Configure Portal Authorization settings like SSO and SAML.
Sisseelamisprotsess
Follow these steps for the onboarding process:
- Download and install the Marvis Client App if not already installed.
- Proceed with SCEP for Wi-Fi profile and client certificate setup.
Sertifikaatide haldamine
For managing certificates, navigate to Organization > Certificates, where you can view, revoke, or manage internal certificates.
Mist Access Assurance Client Onboarding – NAC Portal
Versioon 1.0
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
1
Client Onboarding – NAC Portal
20259 Mist Cloud https://www.juniper.net /documentation /us /en /software /mist /product-updates /latest.html
Mist Documentation
Juniper Mist Access Assurance Guide
Udu https://www.juniper.net/jp/ja/local/solution-technical-information/mist.html
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
2
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
3
ajalugu
Versioon
Versioon 1.0
20259
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
4
© 2025 Juniper Networks
Kliendi liitumine
5 Kadakas ainult äriliseks kasutamiseks
Kliendi liitumine
Client-driven self provisioning
NAC Portal
PSK Portal
MPSK
BYOD
· PSK Portal · SSO(SAML) (password + MFA etc..) · QR SSID/passphrase passphrase email (Optional) · MPSK SSID
PSK Admin
NAC Portal
EAP-TLS
· PSK Portal · SSO(SAML) (password + MFA etc..) · SSID/passphrase passphrase email · MPSK SSID
Marvis Client
Marvis Client Marvis Client(iOS/iPadOS/Android)
· NAC Portal · SSO(SAML) (password + MFA etc..) · Marvis Client & profile/certificate · WPA3/WPA2 802.1X(Mist Auth) SSID
NOTE: Marvis Client Client Onboarding 20259()
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
6
© 2025 Juniper Networks
NAC Portal
NOTE: 20259()
7 Kadakas ainult äriliseks kasutamiseks
NAC Portal
Organization > Certificates
[Organization] [Certificates]
Onboard CA Configuration (Active)
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
8
NAC Portal
Onboard Certificate Authority
Onboard CA Configuration ()
[ ] [Onboard CA Configuration] [Onboard Certificate Authority] [Active] [OK]
Väline/sisemine
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
9
NAC Portal
NAC
[Organization] [Client Onboarding] [NAC] [Add NAC Onboarding Portal]
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
10
NAC Portal
Name / Portal Settings [Name] [Portal Type] [Marvis Client] [Create]
NAC Portal URL URL
NAC Portal URL
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
11
NAC Portal
Portal Authorization
[Portal Authorization] SSO
· [ URL] [SSO URL] · [Microsoft Entra ][Issuer]
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
Entra ID Mist 1
Entra Name ID Format
URL
12
NAC Portal
Portal Authorization
[Portal Authorization] SSO
· (Base64) [][Certificate] · [] [SAML ][]
SAML
Entra ID Mist 2
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
13
NAC Portal
Portal Authorization
[Portal SSO URL] Entra ID [] [ URL]
Mist Entra ID
© 2025 Juniper Networks
Portal SSO URL
14 Kadakas ainult äriliseks kasutamiseks
NAC Portal
Onboarding Parameters
[Onboarding Parameters] [Save]
WLAN Template
Parameetrid
SSID
Security Type Client Certificate Format Certificate expires in X days
Kirjeldus
WLAN Template SSID WPA2/WPA3 > Enterprise(802.1X) Authentication Server: Mist Auth WPA2/WPA3
(: 365)
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
15
NAC Portal
Organization > Auth Policies
Auth Policy
[Organization] [Auth Polices] [Add Rule] Auth Policy© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
16
NAC Portal
Sisseelamisprotsess
IdP(Entra ID etc)
NAC Portal URL
URL
Portal SSO URL
SSO(SAML)
© 2025 Juniper Networks
+ MFA()
Kadakas ainult äriliseks kasutamiseks
Laadige alla ja installige rakendus
Marvis Client
Already have the app?
17
NAC Portal
Sisseelamisprotsess
SCEP
Marvis Client ()Wi-Fi
Marvis Client
Wi-Fi Profile
Kliendi sertifikaat
© 2025 Juniper Networks
Wi-Fi
Kadakas ainult äriliseks kasutamiseks
18
NAC Portal
Organization > Certificates
[Organization] [Certificates] [Internal]
© 2025 Juniper Networks
NAC Portal
19 Kadakas ainult äriliseks kasutamiseks
NAC Portal
Organization > Certificates > Revoke Certificate
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
20
© 2025 Juniper Networks
Appendix Entra ID SAML SSO
21 Kadakas ainult äriliseks kasutamiseks
Entra ID SAML SSO
Entra ID > > Entra ID [] []
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
22
Entra ID SAML SSO
Mist Cloud Admin SSO
[] [] [] []© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
23
Entra ID SAML SSO
[]
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
24
Entra ID SAML SSO
SAML [SAML]
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
25
Entra ID SAML SSO
SAML
Entra ID
SAML
Portal SSO URL
( ID) URL
Microsoft Entra Issuer
SAML
(Base64) Certificate
URL SSO URL
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
udu
26
© 2025 Juniper Networks
Kadakas ainult äriliseks kasutamiseks
27
Dokumendid / Ressursid
 |
Juniper Networks Mist Access Assurance [pdfKasutusjuhend Mist Access Assurance, Access Assurance, Assuranc |