Security

Hi

I have a problem with ClearPass Guest

I am able to get to the Clearpass Guest Login page
However once I click login the page just reloads (with no error messages)

No messages show up in access tracker

I also do not see Radius request using wireshark

However if I leave pre-auth checked on the web login page
I do see the accounts details appear in access tracker
but with authentication failure 204

It seems that there is no Radius Request been submitted after clicking login

I did also test using an "employee" SSID with ClearPass connected
to AD and that works 100%

some details on setup:

network

Flat layer 2

IAP using VC virtual IP: 192.168.100.214
ClearPass IP: 192.168.100.211

Controller:

IAP 205 VC - Version: 6.5.0.0-4.3.0.2_57688
default certificate
securelogin.arubanetworks.com

setup as per setup Guide and videos
I have checked
Captive portal profile -
hostname URL

I have tried with pre and post auth roles and unrestricted

====

ClearPass

default certifcates for Radius and HTTP

Tried multiple services (but cant see how that can be the issue
as I am not seeing anything in access tracker)

Configured IAP VC as the NAS device

Under Guest setup:

created Guest account

created Web login page left everything as default
used securelogin.arubanetworks.com as the address which resolves to 192.168.100.214

I do have internet breakout

any other ideas please?

thank you

You need a public CA-signed certificate for captive portal.

Which device type are you seeing this behavior on?

Hi Tim

I see this on my Android phone and using Firefox on my laptop

On FireFox the usual "This connection is unstrusted" message appears

I add the exception and click on "I understand the risk"

I then comes up with the following message:

"To display this page, Firefox must send information that will repeat any action (such as a search or order confirmation) that was performed earlier"

I have to click on resend, it then just reloads the login page with no further error messages

thanks again

You need to add a public CA-signed captive portal certificate to your VC.

Hi Tim

thank you will give  that a go and feedback

thanks again