Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Captive portal VLAN/IP address then swap to alternate VLAN after successful logon

This thread has been viewed 0 times

  • 1.  Captive portal VLAN/IP address then swap to alternate VLAN after successful logon

    Posted Oct 23, 2012 11:13 AM

    Is this possible...?

     

    Simplified explanation.

     

    Wireless user connected to Captive Portal and gets a 192.168.1.5 address - Vlan 3

    Wireless user successfully logs onto system (via RADIUS) and gets transferred to Vlan 5 with IP address 172.16.0.5

     

    Is this possible and how?

     

    Thanks for any help

    Steve

     

     



  • 2.  RE: Captive portal VLAN/IP address then swap to alternate VLAN after successful logon

    EMPLOYEE
    Posted Oct 23, 2012 11:34 AM
    serveradmins@loucoll.ac.uk wrote:

    Is this possible...?

     

    Simplified explanation.

     

    Wireless user connected to Captive Portal and gets a 192.168.1.5 address - Vlan 3

    Wireless user successfully logs onto system (via RADIUS) and gets transferred to Vlan 5 with IP address 172.16.0.5

     

    Is this possible and how?

     

    Thanks for any help

    Steve

     

     

    Doing this via Captive Portal is difficult, because the main issue is that the client has to detect that the link is down to even attempt to get a different ip address.  

     

    One way to possibly do this is to have the initial VLAN with a DHCP server that provides 10-second leases, so that after authentication, the client can attempt to renew his lease on the new subnet after the VLAN change, but not all clients respond uniformly to short DHCP leases.  

     

    We have had a number of users have varying results with the method above, but most of them gave up and moved to 802.1x.  In 802.1x the device receives the VLAN after authenticaton, so that you can set the VLAN to whatever you want it to be.

     

     

     



  • 3.  RE: Captive portal VLAN/IP address then swap to alternate VLAN after successful logon

    Posted Sep 24, 2013 04:35 PM

    Have any developments or improvements been made in this arena?  I would very much like to force a new IP address and VLAN change on a client device after Captive Portal authentication from a RADIUS server.