Wireless Access

Reply
Contributor I
Posts: 32
Registered: ‎03-13-2014

Captive Portal with Dynamic VLAN Assignment

Hi

 

Is it possible to use captive portal with dynamic vlan assignment on aruba controller? I've tried for 802.1x method, but not sure how to do it for captive portal. Need some advice and guidance on this.

 

Thanks

 

Regards

Michael

MVP
Posts: 447
Registered: ‎11-04-2011

Re: Captive Portal with Dynamic VLAN Assignment

Michael,

 

You can, in theory, switch VLANs on a captive portal authentication. For Aruba, return the VLAN with the captive portal authentication from your authentication server.

 

However, realize that captive portal requires a valid IP address on the client. If you switch VLANs to a different VLAN before - and after authentication, your client will still have the same IP for the old VLAN, resulting in loss of connectivity.

 

Switching VLANs after clients received IP addresses is a problematic thing in general. Clients typically don't like VLAN switches by the network.

 

Some report that setting the DHCP lease-time very short (10-20 seconds) may work as the client will then renew the IP every time; however this approach is a bit flakey.

 

With Aruba WLAN, the better solution is to use different roles and put access-lists and QoS on those roles. The roles may switch and change the access while client remains in the same VLAN subnet; which is probably the result that you want to achieve.

 

Herman

--
If you have urgent issues, please contact your Aruba partner or Aruba TAC.
Contributor II
Posts: 54
Registered: ‎09-27-2012

Re: Captive Portal with Dynamic VLAN Assignment

You could assign a VLAN pool to the SSID, and have the controller dynamically assign VLANs.

Solutions Engineer
CWNA-CWDP-ACMP-ACCP
Frequent Contributor II
Posts: 122
Registered: ‎01-19-2013

Re: Captive Portal with Dynamic VLAN Assignment

We Swith VLAN's on a Captive Portal set-up with MAC-Auth.  Works Great... on Aruba equipment however aruba will sugest you use roles.

 

 

Search Airheads
Showing results for 
Search instead for 
Did you mean: