Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Allowing services before passing through captive portal login

This thread has been viewed 1 times
  • 1.  Allowing services before passing through captive portal login

    Posted Aug 06, 2012 04:29 PM

    Hello everyone,

     

    I am trying to allow our users to still receive e-mail and utilize both the itunes app store & android play store before they login to the captive portal.  How would i do this?  Reason why i am trying to do this is i would like our users to be able to send & receive e-mail on both laptops & mobile phones while connected to our wireless infrastructure but require them to login for any other additional services & network resources.

     

    Any help on this would be greatly appreciated!

     

    Oh and my setup is the following:

     

    650 Controller (1 total) - master

    620 controllers (6 total) - local

    APs (36 total) - 105s

    Aruba OS Version (All controllers) - ArubaOS 6.1.3.1

     

    Thanks,

     

    Iraklis



  • 2.  RE: Allowing services before passing through captive portal login

    Posted Aug 06, 2012 07:48 PM

    By default the user falls into the "logon" role which has the ACLs to redirect it to captive-portal page when trying to access a web page. 

    If you want to allow other services before the user gets the captive portal, just create an ACL that allows those specific services and place that ACL above the captive-portal ACL under the logon role. 

     

     

    Default rights of "logon" role 

    ---------------------------------------------------------------------------------------

    (master) #show rights logon

    access-list List

    ----------------
    Position Name Location
    -------- ---- --------
    1 logon-control
    2 captiveportal
    3 vpnlogon
    4 v6-logon-control
    5 captiveportal6

    ---------------------------------------------------------------------------------------

     

    Role to allow specific services before captive portal 

     

    (master) #show rights logon

    access-list List

    ----------------
    Position Name Location
    -------- ---- --------
    1 logon-control 

    2 allow-services (for e.g. smtp, itunes app store / google play store)

    3 captiveportal 
    4 vpnlogon 
    5 v6-logon-control 
    6 captiveportal6



     

    Hope it helps!