Wireless Access

Gang, I have a guest portal on aruba controller setup to forward to custom skin captive portal on clearpass. This works great if we use the IP address of clearpass in the redirect but fails when we use the DNS hostname of Clearpass. We get the error: “The server could not prove that it is cppm.hostname.com; its security certificate is from securelogin.arubanetworks.com.” then we proceed past the cert error, we get a loop error. Again, all this works fine when we use the IP address to re-direct to Clearpass. We do keep getting cert errors in both cases. We uploaded a 3rd party cert to clearpass; still happens. What are we doing wrong?

Here are the redirect URLs to the captive portal page. IP address and hostname:

h ttps://cppm.hostname.com/defaultpage.php?_browser=1&cmd=login&switchip=10.17.1.31&mac=a0:a8:cd:26:0a:48&ip=10.230.0.23&essid=Xcompany-Guest&apname=Aruba-C0NW01&apgroup=Company_Basement&url=http%3A%2F%2Fwww%2Emsftncsi%2Ecom%2Fredirect

h ttps://10.10.2.50/guest/defaultpage.php?_browser=1&cmd=login&mac=a0:a8:cd:26:0a:48&ip=10.270.0.13&essid=Xcompany-Guest&apname=Aruba-C0NW01&apgroup=Company_Basement&url=http%3A%2F%2Fwww%2Ecnn%2Ecom%2F

Also, what are the disadvantages of using Clearpass default cert?

yes, it can resolve the hostname

Check in browser at the time of browsing.

For chrome use F12 and up right corner click on the error & check the error....

You will get a idea.

Its your DNS issue, check wheather your DNS is able to solve that host name..