Wireless Access

Reply
Frequent Contributor II
Posts: 127
Registered: ‎12-19-2012

captive portal and dest-nat

Hi all, have a need to configure guest access via CP and then dest-nat to a transparent proxy, confused in which order to put the policies.

 

Tested proxy with a dest-nat rule and works fine but need CP first to authenticate.  

 

Thanks

ACMA/ACMP
MVP
Posts: 4,227
Registered: ‎07-20-2011

Re: captive portal and dest-nat

The Initial role on your AAA service should be the guest-logon role

2015-04-01 10_04_27-Security User Roles.png

2015-04-01 10_05_32-Authentication Profiles.png

 

And then in the Captive Portal Auth Profile you define the Guest Proxy Role

2015-04-01 10_06_59-L3 Authentication.png

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Valued Contributor II
Posts: 804
Registered: ‎12-01-2014

Re: captive portal and dest-nat

HI,

CP policy should be mapped to logon role at initial role ( AAA profile ) and you need to add a policy to NAT the traffic to Proxy in the role mapped as the guest-user role through CP profile.

 

Please feel free for any further clarity on this.

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Search Airheads
Showing results for 
Search instead for 
Did you mean: