Controllerless Networks

last person joined: 6 hours ago 

Aruba Instant Wi-Fi: Meet the controllerless Wi-Fi solution that's easy to set-up, is loaded with security and smarts, and won't break your budget.
Expand all | Collapse all

IAP-105 guest splash screen not displayed

  • 1.  IAP-105 guest splash screen not displayed

    Posted Mar 05, 2013 12:55 PM

    Running IAP-105 in a flat layer 2 network with network DHCP in the same subnet. Employee users are able to connect and works fine while Guest users can connect but the splash screen does not appear.

     

    This is the error we get in the AP log:

     

    Jan  5 17:41:13  awc[1022]: isc_init: could not resolve 'device.arubanetworks.com'

     

    Are there particular settings we need within the Windows 2008 RC2 SP1 DNS server or on the clients themselves?

     

    cheers,

     

    Tracy 



  • 2.  RE: IAP-105 guest splash screen not displayed

    Posted Mar 05, 2013 02:49 PM

    Hi

    In order for me to assist you - give me some further info :smileyhappy:

     

    • You doing guest login in front of internaldb in the instantap or in front of a radius?
    • Also - who is giving DHCP address to the guest network?
    • Also - Go to maintence and copy&paster your configuration in the virtual controller(the main Iap-105 unit)

     

    me



  • 3.  RE: IAP-105 guest splash screen not displayed

    Posted Mar 05, 2013 03:39 PM

    Guest login is from IAP internal Dbase

    DHCP is from network in the same broadcast domain

     

    Here is my VC config:

     

    version 6.2.0.0-3.2.0
    virtual-controller-country US
    virtual-controller-key eb9980910145da2be6e8f1695f60baa8470dc5e5cb13569107
    name Instant-CB:30:43
    clock timezone none 00 00
    rf-band 5.0

    allow-new-aps
    allowed-ap 00:24:6c:cb:30:43

    arm wide-bands 5ghz
    min-tx-power 18
    max-tx-power 127
    band-steering-mode prefer-5ghz
    air-time-fairness-mode fair-access
    client-aware
    ip dhcp pool
    dns-server 192.168.26.12
    domain-name wthd.local

    internal-domains
    domain-name wthd.local

    syslog-level debug ap-debug
    syslog-level debug network
    syslog-level warn security
    syslog-level warn system
    syslog-level warn user
    syslog-level warn user-debug
    syslog-level warn wireless

    user tracya c85b41ebe38ac06c222955032741594b43c479630d3ba3a3 portal
    mgmt-user admin 1432ae2499f6a2ebe9feb32cd14425ac

    wlan access-rule default_wired_port_profile
    rule any any match any any any permit
    wlan access-rule guest_ROBO
    rule any any match any any any permit
    wlan access-rule dell_ROBO
    rule any any match any any any permit
    wlan ssid-profile guest_ROBO
    index 0
    type guest
    essid guest_ROBO

    opmode opensystem
    max-authentication-failures 0
    auth-server InternalServer
    rf-band all
    captive-portal internal
    dtim-period 1
    inactivity-timeout 1000
    broadcast-filter none

    dmo-channel-utilization-threshold 90
    local-probe-req-thresh 0
    max-clients-threshold 64

    wlan ssid-profile dell_ROBO
    index 1
    type employee
    essid dell_ROBO
    wpa-passphrase 9fb11962d8f5609ef4d0e96ab41806803ff9919352c01179
    opmode wpa2-psk-aes
    max-authentication-failures 0
    auth-server InternalServer
    rf-band all
    captive-portal disable
    dtim-period 1
    inactivity-timeout 1000
    broadcast-filter none
    dmo-channel-utilization-threshold 90
    local-probe-req-thresh 0
    max-clients-threshold 64

    enet-vlan guest
    auth-survivability cache-time-out 24

    wlan captive-portal
    background-color 65280 banner-color 255
    redirect-url "http://www.dell.com"
    banner-text "Welcome to Guest Network"
    terms-of-use "This network is not secure, and use is at your own risk" use-policy "Please read terms and conditions before using Guest Network"
    authenticated

    wlan external-captive-portal
    server localhost
    port 80
    url "/"
    auth-text "Authenticated"

    blacklist-time 3600
    auth-failure-blacklist-time 3600

    ids
    wireless-containment none

    wired-port-profile default_wired_port_profile
    switchport-mode access
    allowed-vlan all
    native-vlan 1
    shutdown
    access-rule-name default_wired_port_profile
    speed auto
    duplex full
    no poe
    type guest
    auth-server InternalServer
    captive-portal internal
    no dot1x

    enet0-port-profile default_wired_port_profile
    enet1-port-profile default_wired_port_profile
    enet2-port-profile default_wired_port_profile


    uplink preemption
    enforce none
    failover-internet-pkt-lost-cnt 10
    failover-internet-pkt-send-freq 30
    failover-vpn-timeout 180

    airgroup disable

    airgroupservice airplay
    disable
    description AirPlay
    id _airplay._tcp
    id _raop._tcp

    airgroupservice airprint
    disable
    description AirPrint
    id _ipp._tcp
    id _pdl-datastream._tcp
    id _printer._tcp
    id _scanner._tcp
    id _universal._sub._ipp._tcp
    id _printer._sub._http._tcp
    id _http._tcp
    id _http-alt._tcp
    id _ipp-tls._tcp
    id _fax-ipp._tcp
    id _riousbprint._tcp
    id _cups._sub._ipp._tcp
    id _cups._sub._fax-ipp._tcp
    id _ica-networking._tcp
    id _ptp._tcp
    id _canon-bjnp1._tcp



  • 4.  RE: IAP-105 guest splash screen not displayed

    Posted Mar 05, 2013 03:50 PM

    Take a look on the following guide:

    http://community.spiceworks.com/how_to/show/4757-how-to-set-up-an-employee-and-guest-wi-fi-network-using-aruba-instant

    tell me if u configure you guest networks the same and if not what is the diffrent - you can enlage all the screenshots there.

     

    me



  • 5.  RE: IAP-105 guest splash screen not displayed

    Posted Mar 05, 2013 04:10 PM

    Kdisc,  in that scenario he is using the VC to provide DHCP IP addresses to the wireless guest clients while we are trying to use the local network since this is a small branch office setup.  We can do this but what addresses will the VC hand out? Are they routable addresses as our local network is in the 192.168 space so we do not have IP routing enabled in the switch as it is operating purely at L2. 



  • 6.  RE: IAP-105 guest splash screen not displayed

    Posted Mar 05, 2013 04:12 PM

    Also,  since we already have a DHCP in the network would the VC DHCP cause conflicts?



  • 7.  RE: IAP-105 guest splash screen not displayed

    Posted Mar 05, 2013 10:54 PM

    AustinGator,

     

    If you use the magic VLAN (VC assigned) for guests, the traffic will be natted out of the VC.  That is the best way to do it.