Wired Intelligent Edge

Is it posible to configure wired captive portal on Aruba controller and Cisco switches? Controller is connected via trunk port-channel to cisco switch. When computer is connected to switch on port where is configured untrusted vlan it should get captive portal. Computer gets IP address from DHCP server and it has default gateway set to router. How to tunnel traffic from Cisco switch to controler on that specyfic vlan. I know there is tunnel-node on Aruba switches but how to do it on cisco?

 

You can do this but you need to just trunk the VLAN to the edge port on the Cisco and terminate that VLAN on the controller in an untrusted configuration.

 

The tunnel configuration you are asking about is for Aruba switches only...I recommend this route! :)

You could also use ClearPass "natively" with your Cisco switches for web auth/captive portal.

Read this for a quick summary:  https://arubanetworkskb.secure.force.com/pkb/articles/HowTo/R-1183.

 

In order for this to work, the controller needs to see this traffic.  You mention that your default gateway is the router; try changing that to the controller so the traffic is forced through the untrusted port.

Default gateway on controller is preferred, but alternative is throwing the vlan on the Cisco switch into a GRE tunnel between switch and controller. Traffic them flows client > switch > tunnel > controller > router.

Funny, my boss came in this mornign and requested I figure this out for our environment.

 

My Cisco tunnel isn't making sense to me. (My Cisco tunnel-fu is very weak)

 

Anyone have a code-snippet to share?

Thank you all for reply.

I don't want to change default gateway to controller so better for me will be GRE tunnels. How to configure it? I know how to untrust vlan and assign wired profile to it but I don't have clue how to make GRE tunnels between cisco and aruba and send only one vlan. Is there same kind of manual or can someone please write me some config?