Wireless Access

Reply
Occasional Contributor II

Captive Portal Login Address Issues

I recenty inherited managementt of a 3400 mobility controller in my new position here and promptly was hit with the  certificate error Nov. 21. In following the support document, i purchased a certificate, installed and the webUI is working great. The  captive portal however is not.

 

If I preview a portal the portal works fine, no errors. However when a user tries to access the guest network, the address shown isn't the captive portal address. its as though the portal is spoofing the users intended page (see attached), thus throwing more certificate errors.


Nothing has changed in the system except for installing the cert and telling the captive portal and webui to use it. I have poked around a bit and am wondering if I need to have the captive portal fqdn in the URL instead of the defauly "/upload/..." or if I need to check the box "show fqdn" in the captive portal profile.

 

Any help is appreciated.

Guru Elite

Re: Captive Portal Login Address Issues

Try to go to a regular http page and see if you have the same issue.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Captive Portal Login Address Issues

Is that as simple as "Use HTTP for authentication" on  the portal profile? Help mentioned "If you use this option, modify the captiveportal policy to allow HTTP traffic.", but not seeing this option anywhere. Thanks.

Guru Elite

Re: Captive Portal Login Address Issues


RAM Admin wrote:

Is that as simple as "Use HTTP for authentication" on  the portal profile? Help mentioned "If you use this option, modify the captiveportal policy to allow HTTP traffic.", but not seeing this option anywhere. Thanks.


No.  Have the user go to a page that is only http like www.nytimes.com and see if the user has the same issue.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Captive Portal Login Address Issues

Thanks. When the user goes to a non-https site, it redirects to https properly without a certificate warning. Sorry for the delay in responding.

Guru Elite

Re: Captive Portal Login Address Issues

Does the fqdn on the certificate resolve to the ip address of the captive portal unterface on the controller?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Captive Portal Login Address Issues

Can you clarify the the CP interface? Would this be public facing or private facing? Currently the fqdn wifi.theram.com resolves to the public IP in the DNS. Our AP's span 36 locations across the US. If needed I can update the external DNS to point to internal IP.

Guru Elite

Re: Captive Portal Login Address Issues

Does it match the IP address of the guest user interface on the controller (is it private or public?)?


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II

Re: Captive Portal Login Address Issues

Currently it resolves to the public IP of the controller.

Guru Elite

Re: Captive Portal Login Address Issues

On the controller, go to the commandline and type "show ip cp-redirect-address".  That will tell you what ip address on the controller the Captive Portal redirects to when users connect.  That should match the ip address that is resolved through the fqdn.  If this address does not match the fqdn address, that could be why you are getting a mismatch.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: