Security

Reply
Aruba Employee
Posts: 63
Registered: ‎10-12-2010

Amigopod and Moto WiNG

Hi Everyone,

 

I am interested in finding out if anyone have integrated Amigopod with any Moto RFS switches.

 

regards

Ariya

 

Moderator
Posts: 150
Registered: ‎11-14-2011

Re: Amigopod and Moto WiNG

Ariya, We have several customers around the world integrating with Motorola controllers. There have been some recent changes in WiNG5 implemented by Motorola that we are trying to address in our next software release.

Contributor II
Posts: 48
Registered: ‎05-14-2012

Re: Amigopod and Moto WiNG

Is this still an issue? I am trying to set up guest self-registration with RFS7000 which is running Wing 5.2 but it is not working.

Aruba Employee
Posts: 63
Registered: ‎10-12-2010

Re: Amigopod and Moto WiNG

no issue as far i am aware, make sure AMG is running version 3.9

Contributor II
Posts: 48
Registered: ‎05-14-2012

Re: Amigopod and Moto WiNG

Is there any Amigopod Motorola Wing 5 Integration Guide. I would like to see Amigopod working with Motorola.

Aruba Employee
Posts: 63
Registered: ‎10-12-2010

Re: Amigopod and Moto WiNG

there is no integration guide but use this preocedure:

  •  use ClearPass Guest (CPG) 3.9 or later
  • In the example the IP address of CPG is 10.100.100.3
  • Add the CPG as a RADIUS server on Moto switch
  • Add the Moto switch as a NAS to CPG and create an automatic weblogin.
  • ensure that the weblogin is called "RFS-login.php" to match the config stub.
  • This weblogin will use the new Moto weblogin that recognises the Moto redirection in WiNG4.x and 5.x
  • The IP address in the Weblogin is not significant with WiNG5.x so you can even remove it and demonstrate that they need one Weblogin for all their Moto switches.
  • use HTTP for Captive Portal authentication. So set it accordingly on CPG weblogin and the moto side
  • and do not check the "Custom form" checkbox on CPG weblogin.

 

Here is the relevant part of the Moto switch config

 

aaa-policy CPG
authentication server 1 host 10.100.100.3 secret 0 blah
accounting server 1 host 10.100.100.3 secret 0 blah
accounting type start-interim-stop
!
dns-whitelist CPG_whitelist
 permit apple.com suffix
 permit 10.100.100.3
!
captive-portal CPG
webpage-location external
webpage external login http://10.100.100.3/RFS-login.php
webpage external welcome http://10.100.100.3/RFS-welcome.php
webpage external fail http://10.100.100.3/RFS-failed-page.php
use aaa-policy CPG
use dns-whitelist CPG_whitelist
!
wlan blah
ssid blah
vlan 666
bridging-mode tunnel
encryption-type none
authentication-type none
use captive-portal CPG
captive-portal-enforcement
!
use captive-portal server CPG
 
Contributor II
Posts: 48
Registered: ‎05-14-2012

Re: Amigopod and Moto WiNG

Thank you for the quick reply.

Frequent Contributor II
Posts: 117
Registered: ‎02-26-2010

Re: Amigopod and Moto WiNG

you never try with external https captive portal?

 

thanks

Andrea Consadori
ACMP 5.0 and 6.3


-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Contributor II
Posts: 42
Registered: ‎07-14-2010

Re: Amigopod and Moto WiNG

Hi, I'm trying to get this working with a Motorola WiNG 5.3 controller and Clearpass Guest 6.2.x

 

I got the captive portal redirect working, so that users connect to the Guest WLAN, get redirected to Clearpass (using http) but when they try to log in, the login tries to go to the following URL:

 

http://clearpass:880/cgi-bin/hslogin.cgi

 

..which then times out.   

Not sure where it's getting this - I don't have this URL set anywhere in Clearpass so it must be happening on the Motorola but I don't have any idea how this Motorola controller works.  

 

Any ideas?

Frequent Contributor II
Posts: 117
Registered: ‎02-26-2010

Re: Amigopod and Moto WiNG

[ Edited ]

i got it with wing 5.5

 

in wing 5.5 captive portal guide there's the right path.

https://portal.motorolasolutions.com/Support/US-EN/Resolution?solutionId=91998&productDetailGUID=70c33a4a97940410VgnVCM10000081c7b10aRCRD&detailChannelGUID=231d12afa79ae310VgnVCM1000000389bd0aRCRD

 

i dismiss this config because actually wing 5.5 doens't support well https redirect (you've to accept ap certificate if you don't have a motorola controller).

 

i explain better:

 

if the captive portal is configured as external on https page it will work but you've to accept ap self signed certificate

if the captive portal is configured as external managed by motorola controller it will works well in https.

Andrea Consadori
ACMP 5.0 and 6.3


-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: