Security

Reply
New Contributor
Posts: 4
Registered: ‎11-25-2014

ClearPass Registration Page - Auto display

Afternoon all,

I am trying to understand if its possible to have the registration page on a ClearPass network automatically "pop-up" after someone connects to the network.

 

At the moment, our sales guys will connect to the guest network, then assume that they are connected. Forgetting that they then have to authenticate to gain access to the internet.

 

In hotels / airports, when you connect you are then automatically thrown to a connection page that you have to authenticate / agree to before you are allowed to surf. Is this possible on Aruba?

 

Thanks in advance for your support

MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: ClearPass Registration Page - Auto display

What type of controller are you using ?

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
New Contributor
Posts: 4
Registered: ‎11-25-2014

Re: ClearPass Registration Page - Auto display

We have an Airwave installed, in a virtualised environment.

 

Sorry if thats not what you are asking

Aruba Employee
Posts: 436
Registered: ‎02-19-2015

Re: ClearPass Registration Page - Auto display

[ Edited ]

I understnad the currently in your location guest users connect to guest SSID with out going through the registraiton page and you want to configure self registratoin page for guest network using Aruba?

 

If you are using Aruba Clearpass server it is possbile to set up guest self registration page, so when ever a user connects , it will redirect to page where it will ask to enter credentails or accept the terms and condtions to allow access to network.

 

Regards,

Pavan

If my post address your query, give kudos:)

Aruba Employee
Posts: 18
Registered: ‎04-28-2009

Re: ClearPass Registration Page - Auto display

Automatic pop-up of the registration page / captive portal page may depend on the client. For example, when IOS detects that it does not have internet access, its automatic logic Captive network assistant(CNA) will pop-up and will display an authentication page, without opening a browser. Since this is not an actual browser, we have an option to disable this from ClearPass Guest Registration/login page.

 

To check, please navigate to ClearPass Guest --> Configuration --> Pages --> Guest Self registration. Highlight and edit the page and check for the option 'Prevent CNA'. If it is enabled, you may disable and test it from an Apple client.

 

 

New Contributor
Posts: 4
Registered: ‎11-25-2014

Re: ClearPass Registration Page - Auto display

Morning,
We currently have a guest network, yes.

The users connect to this network, then they have to open a browser, go to a site such as bbc.co.uk and then - and only then - it will ask them to enter self register. Our users are forgetting the 2nd stage - hence complaining the process is very negative and giving is bad rep.

I've seen on other such sites that as soon as you connect to the SSID, it automatically opens the browser taking you to the registration page.

Can Aruba CP achieve this?

Thanks
John
New Contributor
Posts: 4
Registered: ‎11-25-2014

Re: ClearPass Registration Page - Auto display

Brilliant! Works a treat!

Is there a similar way for Android? Probably not but its worth the ask

Thank you
Aruba Employee
Posts: 18
Registered: ‎04-28-2009

Re: ClearPass Registration Page - Auto display

It appears androids does have similiar logic, but from CPPM, we don't have any options to block this logic, as we do for IOS clients. So, the devices should automatically pop-up the 'Sign-in to Wi-Fi Network' prompt. 

Ref: http://android.stackexchange.com/questions/123129/how-does-wifi-in-android-detect-if-the-device-has-to-sign-in-or-not

Guru Elite
Posts: 8,632
Registered: ‎09-08-2010

Re: ClearPass Registration Page - Auto display

You can bypass the captive portal on Android by permitting HTTP and HTTPS for the following netdestinations in your user-role.

 

Please note that this MAY also allow access to certain parts of the Google Play store due to the shared platform on Google's end.

 

netdestination android-cp-bypass
    name android.l.google.com
    name clients.l.google.com
    name connectivitycheck.android.com
!

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: