Wireless Access

 View Only
last person joined: 13 hours ago 

Access network design for branch, remote, outdoor and campus locations with Aruba access points, and mobility controllers.
Expand all | Collapse all

ArubaOS Captive Portal 'Accept Conditions' timeout

This thread has been viewed 27 times
  • 1.  ArubaOS Captive Portal 'Accept Conditions' timeout

    Posted 25 days ago

    Hi all,

    We use the build-in captive portal to authenticate guest users (using a generic guest account). We are running into an issue where users have to accept the term and conditions every time they reconnect to the wireless network (or every day they come back to the office).

    Is it possible to configure the controller so that the client's terms acceptance will be remembered for X days?

    Ideally, we want the user to accept the agreements once and then never again on the same device. 

    Thanks in advance!   



    ------------------------------
    Lex
    ------------------------------


  • 2.  RE: ArubaOS Captive Portal 'Accept Conditions' timeout

    MVP GURU
    Posted 24 days ago

    You will need a NAC server like ClearPass to perform MAC auth on guest users after they connect. For instance, a user connects through the captive portal, gains access, and clearpass caches the mac address of the client and allows it to connect for a set amount of time. One the time expires, the user will get redirected to a captive portal again.



    ------------------------------
    Dustin Burns

    Lead Mobility Engineer @Worldcom Exchange, Inc.

    ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022-2023
    If my post was useful accept solution and/or give kudos
    ------------------------------



  • 3.  RE: ArubaOS Captive Portal 'Accept Conditions' timeout

    Posted 24 days ago

    Thanks for the explanation Dustin!

    I understand there are more features when using the ClearPass Captive Portal, instead of the build-in / selfhosted Captive Portal of ArubaOS on the Controller. Every guest user connected through the ClearPass Guest Captive Portal does consume a (guest/acces) license, am I right?  



    ------------------------------
    Lex
    ------------------------------



  • 4.  RE: ArubaOS Captive Portal 'Accept Conditions' timeout

    Posted 23 days ago

    Hi @lkrijnen  , Yes every guest device authenticated with Clearpass consumes an Access license (includes guest auths).  The controller internal captive portal can get ypu so far but with clearpass guest you can achieve so much more. 

    I hope this helps




  • 5.  RE: ArubaOS Captive Portal 'Accept Conditions' timeout

    MVP GURU
    Posted 23 days ago

    Yes each user "Session" will consume an access license. ClearPass license consumption for access is by connected session. Very important to turn on radius accounting to let ClearPass it can release a license when a user session ends.



    ------------------------------
    Dustin Burns

    Lead Mobility Engineer @Worldcom Exchange, Inc.

    ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022-2023
    If my post was useful accept solution and/or give kudos
    ------------------------------



  • 6.  RE: ArubaOS Captive Portal 'Accept Conditions' timeout

    MVP
    Posted 22 days ago

    In my personal experience, you can achieve even MORE flexibility  by using the ClearPass REST API for guest and creating your own captive portal server. We currently do that with our Aruba wireless installation.



    ------------------------------
    Bruce Osborne ACCP ACMP
    Liberty University

    The views expressed here are my personal views and not those of my employer
    ------------------------------



  • 7.  RE: ArubaOS Captive Portal 'Accept Conditions' timeout

    Posted 22 days ago

    Hi Bruce, I'm curious to know what kind of software / vender you use as Captive Portal, can you tell me more about this setup? 



    ------------------------------
    Lex
    ------------------------------