Controllerless Networks

Hi everybody,

I have 10 aruba instant iap-103-rw, and I'd like to know how to get social login (facebook) working on such devices, if it's possible to achieve this goal.

Any help would be much appreciated

A quick search of the community brought back this as the first result:

http://community.arubanetworks.com/t5/Controller-less-WLANs/How-to-configure-Facebook-WiFi-in-IAP/ta-p/242681

Thanks a lot.

I've successfully tested the enviroment , and it's working fine .... BUT. ... there is a way to force "like" on fb page to get internet access ? 

thanks in advance,

Davide

Facebook has banned this type of activity (like gating) since November 2014:  http://www.adweek.com/socialtimes/4-ways-to-prepare-your-business-for-facebooks-like-gate-ban/301460

Thanks again.

One last thing : I see that after connecting to facebook wifi ssid, I correctly land to facebook page , I have to login, then I can register myself, or skip registration. OK, everything fine. But even if i don't login to facebook, I can always surf all the "https" webistes!

Is this an issue?

any news about https hole in social login?

You should allow the following domains in the whitelist:

*facebook.com
*facebook.net
*akamaihd.net
*fbcdn.net

...and block other traffic.

https://cloud4wi.zendesk.com/hc/en-us/articles/200537836-Walled-Gardens-for-the-Social-Login-web-sites-domains-to-open-

But in this way people are only allowed to surf just facebook ?

The role would then need to change somehow after Facebook login to allow traffic to other site. Is this possible @cjoseph @cappalli?

Yes, after the Facebook login, they will get the default role configured for the SSID. You can configure what you want to allow and disallow in that role.

No, I can't manage it to work properly 

First of all, what user cjoseph linked it's not related, since it's point to cloud4wi service, which I don't have (you have to pay to get it)

What I did :

I've added facebook domains under walled garden whitelist, and blocked everything else with "*", but in this way it's blocking everything (captive portal it's not working anymore), but not 443, so it's not useful .

Please note also that a lot of smartphones apps are using 443 to exchange data, so , for example, not only 443 website but also whatsapp is always working.

So I tried to assing a pre-auth role :

Under my SSID, section 4, restriction :

Based on roles : Allow access for every destination

Preauth role : Access Control -> any -> Deny -> Every Destination

But 443 it's always working, even if I don't authenticate ! Youtube, Google, Whatspp and so on are perfectly working, and they shouldn't.

Surely I'm doing something wrong, please help me understand what.

My firmware version is 6.4.2.6-4.1.1.11_52666