Controllerless Networks

Reply
Occasional Contributor I
Posts: 9
Registered: ‎03-17-2017

IAP: Client cannot login to Guest-Wifi through external CP

Hi,

 

I`m running a few iap225 with an external captive portal for the guest wifi. I`ve build a linux apache webserver with the external captive-portal html-page and configured the external captive portal on the aruba. When i connect to the guest-wifi, it opens the browser and displays the cp-page. But after clicking the Login-Button it reloads that cp-page and thats all.

The source-code of that page looks like:

<form method="POST" action="https://cp.host.tld/swarm.cgi">
<input type="hidden" name="cmd" value="authenticate" />
<input type="hidden" name="user" id="user" value="guest"><br>
<input type="hidden" name="password" id="password" value="guest">
<BR><input type="submit" name="Login" value="Login" class="button" />
</form>

Is there an error in the cp-page?

 

Is there any posibillity to debug the logon-process?

MVP
Posts: 992
Registered: ‎04-13-2009

Re: IAP: Client cannot login to Guest-Wifi through external CP

I'd recommend having a look at this blog post by Florian Baaske.

 

In fact, I'd recommend subscribing! Very good blog. 

Cheers
James

-------------------------------------------------------
-------------------@whereisjrw-------------------
------------------------blog-------------------------
ACCX #540 | ACMX #353 | ACDX #216
-----------Mobility First Expert #11----------
-------------------------------------------------------

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users via search.
Occasional Contributor I
Posts: 9
Registered: ‎03-17-2017

Re: IAP: Client cannot login to Guest-Wifi through external CP

I`ve already had a look at that page and build my cp-page exactly like described there :(

Highlighted
MVP
Posts: 992
Registered: ‎04-13-2009

Re: IAP: Client cannot login to Guest-Wifi through external CP

Ah ok. :)

Is this "cp.host.tld" your DNS name on your certificate on your Instants?
Cheers
James

-------------------------------------------------------
-------------------@whereisjrw-------------------
------------------------blog-------------------------
ACCX #540 | ACMX #353 | ACDX #216
-----------Mobility First Expert #11----------
-------------------------------------------------------

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users via search.
Occasional Contributor I
Posts: 9
Registered: ‎03-17-2017

Re: IAP: Client cannot login to Guest-Wifi through external CP


jrwhitehead wrote:

Is this "cp.host.tld" your DNS name on your certificate on your Instants?

thats correct. I`ve installed a wildcard-ssl-certificate for our domain on the aruba iap.


MVP
Posts: 992
Registered: ‎04-13-2009

Re: IAP: Client cannot login to Guest-Wifi through external CP

I see. That could be the problem.

 

 

Have a look at this: http://www.airheads.eu/t5/Controller-less-WLANs/Does-IAP-support-wildcard-certificate-for-captive-portal/ta-p/292431

Cheers
James

-------------------------------------------------------
-------------------@whereisjrw-------------------
------------------------blog-------------------------
ACCX #540 | ACMX #353 | ACDX #216
-----------Mobility First Expert #11----------
-------------------------------------------------------

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users via search.
Occasional Contributor I
Posts: 9
Registered: ‎03-17-2017

Re: IAP: Client cannot login to Guest-Wifi through external CP

I´m running version 6.4.4.8-4.2.4.6_58505 and regarding the release-notes that should work:

Wildcard Server Certificate Support for Captive Portal
Instant 6.4.4.8-4.2.4.4 now supports the wildcard server certificate for captive portal authentication.

http://support.arubanetworks.com/LifetimeWarrantySoftware/tabid/121/DMXModule/661/Command/Core_Download/Default.aspx?EntryId=24688

MVP
Posts: 992
Registered: ‎04-13-2009

Re: IAP: Client cannot login to Guest-Wifi through external CP

That's good.This is the bit that's important:

 

When a wildcard SSL certificate (with CN as *.domainname.com) is installed on the IAP for captive portal authentication, IAP uses the URL as "captiveportal-login.domainname.com" to present the captive portal page. 

 

Therefore the following should read:

 

<form method="POST" action="https://captiveportal-login.host.tld/swarm.cgi">

 

Cheers
James

-------------------------------------------------------
-------------------@whereisjrw-------------------
------------------------blog-------------------------
ACCX #540 | ACMX #353 | ACDX #216
-----------Mobility First Expert #11----------
-------------------------------------------------------

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users via search.
Occasional Contributor I
Posts: 9
Registered: ‎03-17-2017

Re: IAP: Client cannot login to Guest-Wifi through external CP

Thank you so much, i`m working on that external captive portal thing for weeks and now its working!

MVP
Posts: 992
Registered: ‎04-13-2009

Re: IAP: Client cannot login to Guest-Wifi through external CP

Excellent. Glad to hear it's working. :)
Cheers
James

-------------------------------------------------------
-------------------@whereisjrw-------------------
------------------------blog-------------------------
ACCX #540 | ACMX #353 | ACDX #216
-----------Mobility First Expert #11----------
-------------------------------------------------------

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users via search.
Search Airheads
Showing results for 
Search instead for 
Did you mean: