Security

hi,,

 

 

we have trying to connect guest via clearpass guest and aruba controller as nac device,

 

we have already created services and all good,

 

but when guest trying to connect to guest ssid , the redirection url doesnt work with error the page have many rediraction ,,

on the controller we have typed https://"clearpass ip"/guest/aruba_login.php

 

which is the login page name

 

is that dns resolvin issue??

how can we solve it

 

thank you

Hi,

 

The URL is https://clearpassDNSaddress/guest/yourguestsite.php

 

the sites you have configured is under; CPGuest -> Configuration -> Weblogins

 

/Niklas

 

 

 

hi,,

 

 

should i change the login url on controller ?

 

what should i do?

 

thanks

Are you allowing http/https to your clearpass server in the user-role?
Did you assign the captive portal profile under the registration guest role ?
Make sure the you have assign the registration guest role as the initial role under the aaa profile
Did you assign an IP address under the SVI foR guest ?

hi,,

 

 

before clearpass we used controller captibe portal,

and i have created a role for captive portal and assigned captive portal ,and it was working goood,

 

now with clearpass am using http

 

my dhcp is the controller and for dns i have assigned my dns server ip and controller ip also

If you go to the ClearPass guest module >Configuration > Guest Self-Registration 

 

You should be able to see an option to allow you to test or go to the guest registration which will allow to see the url you need to place under the CP profile in the controller :

 

 

You mention "too many redirects" message.   This typically means the user role does not have access to ClearPass; thus the attempt is in a redirection loop.

 

You'll need to allow http/https to your ClearPass IP while the user is in the logon-role for your network:

 

Create a netdestination for your CPPM server(s)

 

netdestination clearpass-servers

host x.x.x.x

 

Allow http/https to this netdestination within the logon role

 

user alias clearpass-servers svc-http permit

user alias clearpass-servers svc-https permit

hi,,

 

 

thanks alotttt :D

 

it was logon role issue, i have added the http and https to cppm

 

thanks