Security

Reply
Super Contributor I

ERR_TOO_MANY_REDIRECTS with CPPM Guest

Hi everyone,

 

I am having problems with the CPPM Guest application. I have created the web login page, configured all the needed parameters and also configured the controller part. When I want to connect to the guest network and client is redirected to https://192.168.1.98/guest/arubalogin.php (in my case) I get the error ERR_TOO_MANY_REDIRECTS. I have seen some posts about this, but still confused.

I can see in the controller that the user gets the correct initial role:

initial_role.PNG

 

Also client gets an IP address within the guest segment and can ping the CPPM address.

However, if I connect to my office network and put in the browser the web login page https://192.168.1.98/guest/arubalogin.php, I can access the CPPM web login page with no problem.

I have checked the initial role policy and I can see it permits http and https to CPPM since destination is "any":

guestsupralogonrole.PNG

 

Do you have any idea where the problem could be?

 

Regards,

Julián

Guru Elite

Re: ERR_TOO_MANY_REDIRECTS with CPPM Guest

Did you add the ClearPass netdestination to the whitelist in the captive portal profile?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Super Contributor I

Re: ERR_TOO_MANY_REDIRECTS with CPPM Guest

Hi Tim,

 

You are the man! I added CCPM to the whitelist in the captive portal profile and problem solved. I followed this guide to configure my controller 

 

https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-integrate-Aruba-Controller-with-CPPM-to-perform-Captive/ta-p/192291

 

but the whitelist point doesn't appear at all. In other guides I have also seen say nothing about the whitelist captive portal profile. Many thanks.

 

Regards,

Julián

Super Contributor I

Re: ERR_TOO_MANY_REDIRECTS with CPPM Guest

Hi Tim,

 

I have found the problem I had. I missed to add HTTP and HTTPS reachability to the CPPM server in the initial role. When I added the ClearPass netdestination to the whitelist in the captive portal profile, it automatically created a rule for that purpose and placed it the first:

whitelist1.PNG whitelist2.PNG

 

Regards,

Julián

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: