Aruba Instant & Cloud Wi-Fi

Reply
Contributor I
Posts: 29
Registered: ‎06-22-2012

Instant IAP105 - Push Proxy Setting to Guest Users

Hi

 

Is it possible for an IAP to push proxy settings to 'guest' users that authenticate against the internal radius server?  I believe that this is possible on a controller and it can push a proxy.pac file via the internal DHCP server using option 252.

 

It is for a school that all traffic must be filtered via the proxy.

 

Any help much appreciated

 

David

Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Instant IAP105 - Push Proxy Setting to Guest Users

Hi friend,

 

Yes it is possible through CLI,

 

1. Create a DHCP profile with required configuration as shown bellow,

 

here DHCP profile name is testdhcp.

 

IAP dhcp.JPG

 

2. Map this profile to the guest SSID.

 

3. Define the pac file properly.

 

Hope you got your answer,

 

Please feel free for any further query on this.

 

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Contributor I
Posts: 29
Registered: ‎06-22-2012

Re: Instant IAP105 - Push Proxy Setting to Guest Users

HI Venu

 

Many thanks for the reply.  Can you explain more on your point 3). Define the PAC file properly? 

 

Is the proxy.pac file uploaded to the controller?

 

On you example is the IP address 172.16.8.4. the virtual controller?

 

I look forward to hearing from you, sorry that I have very limited knowledge on this!

 

Regards

 

David

Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Instant IAP105 - Push Proxy Setting to Guest Users

Hi,

 

The IP address in the example is the VC IP address and we need not create and upload any .pac file like in a controller.

 

you can configure the proxy server address and the port number in IAP directly as shown bellow.

 

Select "System--Advanced options--Proxy"

 

Proxy.JPG

 

Please feel free for any further help on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Contributor I
Posts: 29
Registered: ‎06-22-2012

Re: Instant IAP105 - Push Proxy Setting to Guest Users

HI

 

Sorry two more questions!

 

1). Do I need to set up a DHCP scope on the VC before I run the dhcp option 252 commands on the CLI?  If so do I set up a centralised, distributed or local dhcp scope.

 

2). When you said that 172.16.8.4 is the VC IP address, did you set this up as a static IP in the SYSTEM-GENERAL?

 

Your help and pateince is much appreciated.

 

Thanks

 

David

Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: Instant IAP105 - Push Proxy Setting to Guest Users

Ok,

 

Let me help you on this,

 

1. Open "DHCP server" page ( More-->DHCP server)

 

2. Create a new local DHCP as shown bellow,

DHCP scope.JPG

 

here type should be "Local", select Guest VLAN, enter guest subnet and mask

 

Here you can select the option type ( 252) and you can enter the path for the proxy .

 

3. map this dhcp to the Guest SSID, as shown bellow,

 

DHCP scope1.JPG

 

4. ensure that the proxy is configured in the IAP as shown bellow ,

Proxy.JPG

 

Hope got more clarity on this,

 

Please feel free for any further help on this.

 

 

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Contributor I
Posts: 29
Registered: ‎06-22-2012

Re: Instant IAP105 - Push Proxy Setting to Guest Users

Hi

 

We are using an IAP with firmware 6.3.1.8-4.0.0.8_46401 and when you create the new WLAN, under VLAN (Client and VLAN assignment) there is only the option for

 

Client IP Assignment -Virtual Controller managed and Network assigned.

 

The Client VLAN assignment radio buttons are not present to allow you to custom select the 'testdhcp(valn1) dhcp scope.

 

Do you know if this has been moved to somewhere else?

 

Thanks

 

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: