I'm working with a customer who has APs split between their controllers. We are doing HTTPS login after registration and have a valid cert on both controllers. Problem is, we don't know which controller to submit to. I want to setup a landing page that keys off of the switch ip in the redirect to send them to registration pages that have NAS login to their respective controllers. Any chance someone has the code available to do this or know what I need to write up?
But don't we have to submit it back to a DNS name? The certs on the controllers are wildcard, but the DNS entries are different.
Ok so what would I use in the nas-login address than, just leave it securelogin.arubanetworks.com and it will find its way back to the controller?
In the case of a wildcard certificate, you should use captiveportal-login.<suffix of your wildcard>:https://community.arubanetworks.com/t5/Controller-Based-WLANs/How-does-Aruba-Controller-work-with-wild-card-certificate-for/ta-p/203199
And as mentioned elsewhere, there is no need to put that name in DNS anywhere, as the controller will intercept the DNS request and respond with the correct IP for the controller. For that same reason, you can put the same certificate on all your controllers.
That worked perfectly. Thank you all for your help and insight into this.
At Aruba, we believe that the most dynamic customer experiences happen at the Edge. Our mission is to deliver innovative solutions that harness data at the Edge to drive powerful business outcomes.
© Copyright 2020 Hewlett Packard Enterprise Development LPAll Rights Reserved.