Wireless Access

Reply
Super Contributor II
Posts: 354
Registered: ‎09-26-2012

Welcome Page Without Authentication

Can we Implement welcome page without implementing CP or any other authentcation? we want to implement open network without any authentication but welcome page should be shown to the users.

Please note we do not have airwave or Clear paas installed.

Thanks & Regards
Syed Murad Ali
ACMP ACMA CCNA
MVP
Posts: 4,268
Registered: ‎07-20-2011

Re: Welcome Page Without Authentication

[ Edited ]
See if this helps you should be able to use the controllers captive portal :
https://arubanetworkskb.secure.force.com/pkb/articles/HowTo/R-1649
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Super Contributor II
Posts: 354
Registered: ‎09-26-2012

Re: Welcome Page Without Authentication

Thanks for your response, We are already implemented the same i.e guest login with "Accept" button.
But now want eliminate that Accept button as well.
The reason behind that is; this system has installed in hospitality sector, The user comes and connect with the SSID, Now sometimes they don't open the web browser and press the accept button; instead they just start email or watsapp or skype etc.
Since they didn't pass the authentication process so they are failed to get the required services.

Thanks & Regards
Syed Murad Ali
ACMP ACMA CCNA
MVP
Posts: 4,268
Registered: ‎07-20-2011

Re: Welcome Page Without Authentication

I feel your pain this is a very typical issue .

Would be possible to allow certain protocols thru the captive portal user role like email ?
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Super Contributor II
Posts: 354
Registered: ‎09-26-2012

Re: Welcome Page Without Authentication

Yup that is what we have done right now. We have allowed SMTP, PoP etc but don't know what to do with Skype, Wats app etc,
Would you please provide the list of possible protocols/ports that you allow in initial role; commonly use in such cases.
Thanks & Regards
Syed Murad Ali
ACMP ACMA CCNA
Guru Elite
Posts: 8,453
Registered: ‎09-08-2010

Re: Welcome Page Without Authentication

[ Edited ]

Couple of things:

 

If you do your initial role ACLs correctly, most operating systems will prompt the user to open a browser. Many people just open up all Apple destinations, all Google, all Microsoft, etc because its easier and less troubleshooting. If you only open what you need, then you will most likely get a captive portal indication on the client (either the browser opens or you get a balloon that says click to open browser).

 

Also, you could setup your welcome page with some embedded HTML that automatically redirects after X seconds and POSTs a credential back the controller. Use a generic account like guest / guest123. The controller would then put the user into the guest role set in the CP profile.

 


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor II
Posts: 113
Registered: ‎11-27-2012

Re: Welcome Page Without Authentication

Just to chip in:

If you want a welcomepage without an "accept" button you can follow my tutorial here:

http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Internal-Captive-Portal-with-automatic-guest-auth-and-redirect/m-p/131299

This tutorial explains how to configure the internal captive portal to log in the user automatically and redirect to a welcome page with no user interaction needed.

The user would still need to show the captive portal in a web-browser / captive-portal-viewer to log in and get the logged-in role tho..

-----------------------------------
-ACMX #352-
Remember to Kudo if a post helped you! || Problem Solved? Click "Accept as Solution" in a post!
Super Contributor II
Posts: 354
Registered: ‎09-26-2012

Re: Welcome Page Without Authentication

Thank you so much for your response, Your advices are really very valuable for me. I will try to implement those now.

Still my question was at same point. Can we configure Welcome page with open authentication??

I believe No, But I just need your opinion.
Thanks & Regards
Syed Murad Ali
ACMP ACMA CCNA
Guru Elite
Posts: 8,453
Registered: ‎09-08-2010

Re: Welcome Page Without Authentication

You still need some type of POST back to the controller to shift the role to a full access role. It might not be user facing, but you need some HTML in the background to do it.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor II
Posts: 113
Registered: ‎11-27-2012

Re: Welcome Page Without Authentication

the closest solution to this have already been suggested.

if you redirect only http+https traffic to the captive portal, and allow all other traffic, then you will get the result you need.

The backside of this is that you will basically have a completely open internet access for your guests with no firewall rules.

Then if you do not want this, you need to either remove allow-all and only allow spesific trafic, or allow all and block spesific traffic.

-----------------------------------
-ACMX #352-
Remember to Kudo if a post helped you! || Problem Solved? Click "Accept as Solution" in a post!
Search Airheads
Showing results for 
Search instead for 
Did you mean: