01-30-2018 03:16 AM
When a DNS request is done from any SSID (even with no Captive Portal and Unrestricted Network access) to the hostname, which is also used as subject for the Captive Portal certificate, the AP seems to always return the VC IP address.
The used certificate has a subject which is actually the host name of another server, making it unreachable from any wireless client.
The DNS server for the clients is not the VC, but a Windows server.
Is this behaviour by design?
Solved! Go to Solution.
01-30-2018 03:28 AM - edited 01-30-2018 03:28 AM
Yes. That is the how the captive portal does redirection and authentication. You need to give the VC its own CN (Common Name) to prevent this from happening.
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.