Controllerless Networks

last person joined: 2 days ago 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

aboout external portal sso on iap-105

This thread has been viewed 1 times

  • 1.  aboout external portal sso on iap-105

    Posted Nov 26, 2015 10:00 PM

    Hello every body

    Now I have a aruba iap-105 and a external captive portal,we need redirect a user to portal page ,then portal give notify iap who is already login , now I use the protocol is CMCC2.0，external portal is also the radius server,about the process is :

    1.user visit a website,then iap redirect to portal

    2.user type username and password in portal, then submit

    3.portal send a udp packet to iap to auticate

    4.autication between radius server(portal) and iap

    5.finally, iap return a result(sucess or failed) to portal, then portal let user login or reuturn a fail message

    Now,I have a problem at 3rd step,in CMCC protocol,portal send a udp packet to iap ,but iap return a icmp packet:destination unreachable (port unreachable),ps: the dst port is udp 2000

    so,my question is: I heard iap support portal protocol, and cmcc is one kind of portal,but I cannot auth, why?

    Maybe I go wrong the protocol, if so ,please tell me what the right protocol,or other method I can use, thank you very much(ps:about auth text,I cannot return anything in some of scenes,so I cannot use this method)



  • 2.  RE: aboout external portal sso on iap-105

    EMPLOYEE
    Posted Nov 26, 2015 10:14 PM
    Instant does not work that way with external captive portal. A video of how it is done is here: http://community.arubanetworks.com/t5/Video/VIDEO-Configuring-Aruba-Instant-Guest-Network-with-External/ta-p/90322


  • 3.  RE: aboout external portal sso on iap-105

    Posted Nov 26, 2015 10:34 PM

    sorry, the video I cannot see;so, you means aruba do not support portal protocol ? now my portal can auth on aruba wac by xml-server, so, aurba iap can use the method,too?but I cannot see the configuration on iap WEB UI,how can I setup a xml-server on a iap?by commands?



  • 4.  RE: aboout external portal sso on iap-105
    Best Answer

    EMPLOYEE
    Posted Nov 26, 2015 11:53 PM

    Okay.  The IAP on any version of code from 4.1.1.x and later support XML-API.  You setup the XML-API server (that would be sending the commands to the IAP) using the instructions here http://www.arubanetworks.com/techdocs/Instant_41_WebHelp/InstantWebHelp.htm#UG_files/Services/xml_api.htm

     

    The commands you can use using the XML-API and the format are explained here;  http://community.arubanetworks.com/t5/Controller-Based-WLANs/How-does-the-ArubaOS-XML-API-Work/ta-p/179218

     

     



  • 5.  RE: aboout external portal sso on iap-105

    Posted Nov 27, 2015 02:05 AM

    Thanks for your reply,it is very useful for me. Now,I know there are three methods for SSO with aruba iap,post url "/cgi-bin/login";xml-server;auth-text,and there is any other method exist?

    In addition,about post url "http://iap-IP/cgi-bin/login",I tried post by portal,but iap return a 500 Internal error page,then user post the url is ok,why?there is any solution?(user-iap-portal)