Controllerless Networks

last person joined: yesterday 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

Custom Captive Portal\SSL certs\Post back url

This thread has been viewed 6 times

  • 1.  Custom Captive Portal\SSL certs\Post back url

    Posted Nov 06, 2017 07:12 AM

    Hi

       I wondering if anybody has written a captive portal for an IAP. I have written a portal and want to authenticate off the internal IAP user list

    My issue is the post back url..

    I have added a public cert to the ap (wireless.xxx.com) and internal portal works with this. Aruba support have told me that external portal server and iap ssl cert has to be the same name (wireless.xxx.com), however the post back has to be securelogin.arubanetworks.com or hpe.com.

    I'm confused with this as I would have assume the IAP cert and Portal server would have to be different for DNS lookup.

    I've tried the custom captive portal with all combinations of the post back url (wireless.xxx.com,secruelogin.arubanetowrks.com and hpe.com) with no joy, the page either times out or page cannot be found!

    I would appreciate if any Airhead could help?

    K

     

    PS Aruba add a few lines of code to center the internal portal (and the Central Guest login) on all devices and I wouldn't have to do this.



  • 2.  RE: Custom Captive Portal\SSL certs\Post back url

    EMPLOYEE
    Posted Nov 06, 2017 07:21 AM

    Please see here:  http://community.arubanetworks.com/t5/Controllerless-Networks/IAP-external-captive-portal-HTML-code/td-p/118605 for sample html code.

     

    The "post" has to be an fqdn that has the certificate fqdn.  If you uploaded a wildcard cert, then the fqdn should be like the example here:  http://community.arubanetworks.com/t5/Controller-less-WLANs/Does-IAP-support-wildcard-certificate-for-captive-portal/ta-p/292431

     

    The instant cluster intercepts DNS requests for the fqdn of the certificate and responds with its own ip address.  The "post" needs to point to that fqdn so that when you click on the button, it sends traffic to the Instant cluster for processing.



  • 3.  RE: Custom Captive Portal\SSL certs\Post back url

    Posted Nov 06, 2017 07:45 AM

    Thanks Colin that explains the process which Support couldn't ...Comeback to you once I modified my coding