Wireless Access

Hi Community, 

I hope your all fine, 

I've got a issue with a Guest Access :

When i opening a browser ( IE, Chrome or FF ) i've got the following message :

"DNS_PROBE_FINISHED_NO_INTERNET"

I can get why my Guest Access doesn't works...  could you help me ? i've you got some ways to check ?

Many thanks in advance.

Best regards.

I've got some proxy servers and so on for the guest access....

Does i need proxy server for the guest ?

Arubacontroller #show ip cp-redirect-address

Captive Portal IPv4 redirect Address ... 192.168.1.10
Captive Portal IPv6 redirect Address ... ::1

the ip is not on my Guest subnet

Have you verifed your DHCP settings gateway, dns, etc? (assmuming you are handling DHCP).

What is providing the portal for the guests?

Yes, i've checked that points.

The DHCP push down to the computers the correct DNS gateway and so on...

"What is providing the portal for the guests?" what do you means ?

Many thanks in advance.

Best regards.

What is the CP? Is it the internal controller CP, is it ClearPass, or a 3rd party page.

You also may want to check the role the client is dropped into and make sure all the protocols are allowed for internet access.

Yes is it the controller right.

For the internet, i just allows, DNS, https and http.

Would you like some part of the configuration ?

You need to allow DHCP also.

Is the client you are testing with getting an IP?

Sorry, DHCP as well.

Yes the client are gettings an IP.

strange...

Hello, 

Any updated ? or Ideas ?

Many thanks in advance.

Best regards.

You can still get to the CP right?

If you can get to the CP, does the problem continue after authentication? Im thinking it is a problem with the initial role, if you are good after authentication.

Hello, 

Many thanks for your quick reply.

Actually, i'm not sure... i can get access to the CP adresse page but it redirect me to the regular admin page of Aruba.

Initial role means : guest-logon-policies right ?

Many thanks in advance.

If you connect to the guest SSID, can you authenticate? 

The admin login page you are referring to, is it the controller login page?

You can find your initial role by checking your AAA profile. 

Navigate to:

Configuration>Security > Authentication > Profiles and double click on the profile name to see the roles.

Then check to make sure your policies in the roles are correct and what you need.

Many thanks for your answers!

I'm not on site right, i'll plan to double check it on site.

Yes it is the admin page right.

To be sure :

You need at leat 2 policies ? the initial one and the authentification ?

If i understand, it's means that i can get access to the CP page because the initial role doesn't works.

For example, if i get access to the CP page authenticated and i cannot get acess to internet the Authentification role doesn't work.

Is it right ?

In my case, i've got the DNS error when i want to get access to internet but before the CP page...

I can get it thru the IP address...

Which role is it ? i'm little bit lost ...