Controllerless Networks

Hi,

I am trying to setup captive portal for one of SSID, the users get authenticated via Radius.

everything on Wi-Fi side working but captive portal is not opening.

I have a profile setup for Captive portal and it is linked to initial role, Logon but nothing happens when a user connects to that particular SSID.

I can post the output if required.

Thanks

Attachment(s)

aruba show rights.txt   9 KB 1 version

Did you create the Captive Portal using the WLAN Wizard?  It is easier that way.  Creating it manually involves too many steps....

not sure it was already created in the past, I just linked it to the profile,

i have attached the output in first post, if you could check it please.

I don't see any problem with that ACL, but there is more to it.  Can your client get an ip address and resolve DNS?  Is your client getting that initial role when it associates?

users get ip address and browse internet fine

this is the CP profile for aruba, once connected to Wi-Fi, I am unable to reach it.

https://192.168.6.2/cgi-bin/login?profile=test_mac_cp

Users browse the internet just fine, because they are not being placed into the correct initial role.  The initial role is assigned by the AAA profile.  That initial role should be the first role that you pasted into the forum.

pl see attached

Attachment(s)

aruba show rights-authenticated.txt   3 KB 1 version

aruba show rights-guest.txt   7 KB 1 version

Are you using the correct AAA profile?  If you type "show user", the profile column will tell you what AAA profile is being used for that user.  Change that AAA profile's initial role to that logon role.

yes looks fine

10.6.1.146      d0:57:7b:22:73:97  host/LAP332  authenticated  00:02:23    802.1x            10Lath_AP1  Wireless  STC/d8:c7:c8:ad:ea:d2/g-HT        STC-aaa_prof             tunnel        Win 10

That device looks like it logged in using 802.1x and not captive portal.

thats correct

sorry my bad

I want users redirected to CP after successful login, is that possible?

basically we want user to install a cert from firewall once logged in

So my plan is to redirect user to that page.

You should change the default 802.1x role in the AAA profile to logon.

do you mean the 

Default machine and user role?

see attached

No.

In the AAA profile, the dot1x default role should be logon.

right When i change 802.1X Authentication Default Role to logon 

it is opening page but going to below url and showing blank page

https://securelogin.arubanetworks.com/cgi-bin/login?

can anyone help with this, any idea why it is keep going to 

https://securelogin.arubanetworks.com/cgi-bin/login?

sorted now thanks