Security

Reply
Occasional Contributor II
Posts: 57
Registered: ‎04-01-2010

Captive portal page

All,

 

We recently migrated over to Clearpass from the Amigopod.  The issue we are having is that the captive portal page no longer comes up automatically when a device connects to our Guest wireless.  When we had the captive portal page on the amigopod the guest captive portal page automatically redirected when you opened up a browser since we switched over to Clearpass the devices/customers now need to type in a URL to somewhere to get the guest captive portal page.  Is there a setting or option that can be set to get the same functionality?

 

Thanks,

 

Bill

Guru Elite
Posts: 19,964
Registered: ‎03-29-2007

Re: Captive portal page

Are you using an Aruba Controller? If so, what version?
Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Validated Reference Design Guides : http://community.arubanetworks.com/t5/Validated-Reference-Design/tkb-p/Aruba-VRDs
Occasional Contributor II
Posts: 57
Registered: ‎04-01-2010

Re: Captive portal page

We are using Aruba Controllers (7200 series) running 6.4.2.5 code.

Aruba Employee
Posts: 571
Registered: ‎04-17-2009

Re: Captive portal page

There are two different places to enable/disable CNA Bypass. One is on the captive portal profile on the controller. The other is on the Guest Self Registration or Web Login page (look in the Advanced Editor for the page). Make sure it is unchecked in both locations.

 

Screenshot from Advanced Editor in CPG:

 

Screen Shot 2015-05-06 at 2.27.05 PM.png

 

This should cause the automatic popup of the reg/login page to start working again.

Thanks,

Zach Jennings
Occasional Contributor II
Posts: 57
Registered: ‎04-01-2010

Re: Captive portal page

Hi Zach,

 

Thanks for the reply.  I checked the Clearpass Guest side of things and the 'Enable bypassing the Apple Captivve network Assistant' is unchecked.  On the controller side I could not find the equivalent setting within the Captive Portal Authentication Profile.  Maybe it's named differently than I think.

 

Thanks,

 

Bill

Occasional Contributor II
Posts: 57
Registered: ‎04-01-2010

Re: Captive portal page

Zach,

 

Nevermind.   I found it.  It's unchecked in the Captive Portal Authentication as well.  It's Monday morning.  :)

Aruba Employee
Posts: 571
Registered: ‎04-17-2009

Re: Captive portal page

Ok, so the other thing that can cause the Captive Network Assist to not Fire off is a self-signed HTTPS certificate. You can either switch over to HTTP or install a Publically Signed HTTPS cert in CPPM.

To switch to HTTP to test this, you need to change the redirect to HTTP and you need to uncheck the require HTTPS for operator login in CPG under Configuration->Authentication.
Thanks,

Zach Jennings
Guru Elite
Posts: 7,837
Registered: ‎09-08-2010

Re: Captive portal page

[ Edited ]
Can you also post the output of "show rights <your-guest-logon-role>



Thanks,
Tim

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Occasional Contributor II
Posts: 57
Registered: ‎04-01-2010

Re: Captive portal page

Zach,

 

It appears we are using a public https cert on our CPPM subscribers and publishers for https stuff.  I assume once connected to guest the login/auth page should automatically come up without intervention?

 

Tim,

 

Where do I do 'show rights' from?  Controller?

Aruba Employee
Posts: 571
Registered: ‎04-17-2009

Re: Captive portal page

Ok. I'm guessing that the CRL for that public cert is white listed.

Keep in mind that there are 2 different certs that you can upload in CPPM. One is the RADIUS and the other is the HTTPS SSL.
Thanks,

Zach Jennings
Search Airheads
Showing results for 
Search instead for 
Did you mean: