Aruba Instant & Cloud Wi-Fi

Reply
Occasional Contributor II
Posts: 10
Registered: ‎11-26-2015

aboout external portal sso on iap-105

Hello every body

Now I have a aruba iap-105 and a external captive portal,we need redirect a user to portal page ,then portal give notify iap who is already login , now I use the protocol is CMCC2.0,external portal is also the radius server,about the process is :

1.user visit a website,then iap redirect to portal

2.user type username and password in portal, then submit

3.portal send a udp packet to iap to auticate

4.autication between radius server(portal) and iap

5.finally, iap return a result(sucess or failed) to portal, then portal let user login or reuturn a fail message

Now,I have a problem at 3rd step,in CMCC protocol,portal send a udp packet to iap ,but iap return a icmp packet:destination unreachable (port unreachable),ps: the dst port is udp 2000

so,my question is: I heard iap support portal protocol, and cmcc is one kind of portal,but I cannot auth, why?

Maybe I go wrong the protocol, if so ,please tell me what the right protocol,or other method I can use, thank you very much(ps:about auth text,I cannot return anything in some of scenes,so I cannot use this method)

Guru Elite
Posts: 19,993
Registered: ‎03-29-2007

Re: aboout external portal sso on iap-105

Instant does not work that way with external captive portal. A video of how it is done is here: http://community.arubanetworks.com/t5/Video/VIDEO-Configuring-Aruba-Instant-Guest-Network-with-External/ta-p/90322
Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Occasional Contributor II
Posts: 10
Registered: ‎11-26-2015

Re: aboout external portal sso on iap-105

sorry, the video I cannot see;so, you means aruba do not support portal protocol ? now my portal can auth on aruba wac by xml-server, so, aurba iap can use the method,too?but I cannot see the configuration on iap WEB UI,how can I setup a xml-server on a iap?by commands?

Guru Elite
Posts: 19,993
Registered: ‎03-29-2007

Re: aboout external portal sso on iap-105

Okay.  The IAP on any version of code from 4.1.1.x and later support XML-API.  You setup the XML-API server (that would be sending the commands to the IAP) using the instructions here http://www.arubanetworks.com/techdocs/Instant_41_WebHelp/InstantWebHelp.htm#UG_files/Services/xml_api.htm

 

The commands you can use using the XML-API and the format are explained here;  http://community.arubanetworks.com/t5/Controller-Based-WLANs/How-does-the-ArubaOS-XML-API-Work/ta-p/179218

 

 

Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Occasional Contributor II
Posts: 10
Registered: ‎11-26-2015

Re: aboout external portal sso on iap-105

[ Edited ]

Thanks for your reply,it is very useful for me. Now,I know there are three methods for SSO with aruba iap,post url "/cgi-bin/login";xml-server;auth-text,and there is any other method exist?

In addition,about post url "http://iap-IP/cgi-bin/login",I tried post by portal,but iap return a 500 Internal error page,then user post the url is ok,why?there is any solution?(user-iap-portal)

Search Airheads
Showing results for 
Search instead for 
Did you mean: