Controllerless Networks

Reply
Frequent Contributor I

DNS request to CP Cert subject returns VC IP

When a DNS request is done from any SSID (even with no Captive Portal and Unrestricted Network access) to the hostname, which is also used as subject for the Captive Portal certificate, the AP seems to always return the VC IP address.

The used certificate has a subject which is actually the host name of another server, making it unreachable from any wireless client.

The DNS server for the clients is not the VC, but a Windows server.

 

Is this behaviour by design?

 

 

Guru Elite

Re: DNS request to CP Cert subject returns VC IP

Yes.  That is the how the captive portal does redirection and authentication.  You need to give the VC its own CN (Common Name) to prevent this from happening.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor I

Re: DNS request to CP Cert subject returns VC IP

Thx Colin.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: