Wireless Access

 View Only
  • 1.  AOS 10 tunnel guest ssid captive portal error

    Posted Apr 22, 2025 09:33 AM

    Hi guys

       The customer's network environment is: central+ap+9012+clearpass

       I configured a guest portal ssid, centralized forwarding, using clearpass sso azure ad guest portal。

       I found that the captive portal page popped up on Windows 11 and Android phones could not automatically jump to the normal authentication interface. A 204 error would pop up. When I used Chrome to redirect manually, it could pop up normally and the authentication was successful.

       I haven't found the cause of the problem, can anyone give me some ideas? Thanks everyone

       



    ------------------------------
    leo ma
    ------------------------------


  • 2.  RE: AOS 10 tunnel guest ssid captive portal error

    Posted Apr 23, 2025 09:33 AM

    Can you provide some more information on what is going on?  I'm not understanding the behavior based on your current description.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------



  • 3.  RE: AOS 10 tunnel guest ssid captive portal error

    Posted Apr 24, 2025 03:49 AM

    Hi 

         Currently it is connected to Azure AD and uses SSO to perform PAP authentication:

    https://xxxx:8887/guest/aad_sso.php?oauth=azure&_browser=1

         During the redirection process, the Edge browser will get stuck at this URL:

    https://login.microsoftonline.com/common/oauth2/authorize?client_id=dd8b10f0-b746-4752-a077-e2f46ec974f1&redirect_uri=https%3A%2F%2Fzxyfirzen.xyz%3A8887%2Fguest%2Fweblogin.php&scope=&state=1744871138-50dc9f&response_type=code&resource=https://graph.microsoft.com

    image002.png



    ------------------------------
    leo ma
    ------------------------------



  • 4.  RE: AOS 10 tunnel guest ssid captive portal error

    Posted Apr 24, 2025 10:13 AM

    Maybe relevant: https://community.arubanetworks.com/discussion/guest-authentication-with-entra-id

    Also, you'll probably want to ask ClearPass questions in the Security board rather than Wireless.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------