Controllerless Networks

Reply
Frequent Contributor I
Posts: 77
Registered: ‎12-07-2015

Instant - Captive Portal possibilities (AD Login/device caching)

Hi all, need someone to refresh my memory.  

 

1. Can instant captive portal do AD auth or is it only local user based?

 

2. Also, can instant captive portal do mac/user caching so they do not have to login again?

 

I know ClearPass can do this, but cant remember the basic functionality for Instant. 

 

-N

MVP
Posts: 1,008
Registered: ‎04-13-2009

Re: Instant - Captive Portal possibilities (AD Login/device caching)

1. Instant captive portal supports AD auth via either LDAP or RADIUS.

 

2. Yes, but you'll need an authentication server that stores the list of users/MAC addresses such as ClearPass.

 

Cheers
James

-------------------------------------------------------
-------------------@whereisjrw-------------------
------------------------blog-------------------------
ACCX #540 | ACMX #353 | ACDX #216
-----------Mobility First Expert #11----------
-------------------------------------------------------

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users via search.
Frequent Contributor I
Posts: 77
Registered: ‎12-07-2015

Re: Instant - Captive Portal possibilities (AD Login/device caching)

So I was able to get this to work but it seems like any AD auth via the captive portal only uses PAP. Is there a way to change this?

 

N

Guru Elite
Posts: 21,487
Registered: ‎03-29-2007

Re: Instant - Captive Portal possibilities (AD Login/device caching)

Captive Portal requires pap.  The username is in clear text, but the controller encrypts the user password using the RADIUS shared secret.  That is why it is important to choose a complicated radius shared secret.  If you want better encryption, you should move to 802.1x.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: