Wireless Access

 View Only
last person joined: 12 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Central iap external portal fail

This thread has been viewed 22 times
  • 1.  Central iap external portal fail

    Posted May 28, 2023 09:11 AM

    hi teams
       I have configured external portal authentication on the central, and the portal can pop up normally after the PC is connected, but it cannot be successful when it is redirected to the iap page:test portal is clearpass guest

    this central config:

    DNS can work normally, but the packet capture does not resolve to the correct iap ip address:


    In the same environment, the authentication can be successful using an iap that has not joined the central.

    Where should I check?



    ------------------------------
    leo ma
    ------------------------------


  • 2.  RE: Central iap external portal fail

    EMPLOYEE
    Posted May 28, 2023 09:47 PM

    so i take it that the PC gets redirected to the guest page on ClearPass correct?
    then when the user types the credentials or accept terms and then the user sees the securelogin waning/error.
    if this is the case, yu need to upload the public HTTPS certificate for IAP's captive portal , so that the users dont see this warning/error.
    you also need to reference the new cert in ClearPass guest weblogin.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 3.  RE: Central iap external portal fail

    Posted May 29, 2023 07:36 AM
    1. The clearpass page is correct, I use a separate controller authentication is successful,
      2. The iap certificate is the default and has not been modified. I don't think it should be the problem you mentioned
      3. The portal authentication will fail only when iap joins the central
      4. The portal authentication is successful without joining the central iap.




    ------------------------------
    leo ma
    ------------------------------



  • 4.  RE: Central iap external portal fail

    Posted May 31, 2023 02:38 AM

    hi 

    case solved, it's the iap domain name issue



    ------------------------------
    leo ma
    ------------------------------



  • 5.  RE: Central iap external portal fail

    EMPLOYEE
    Posted May 31, 2023 03:18 AM

    good troubleshooting !



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 6.  RE: Central iap external portal fail

    Posted May 31, 2023 04:07 AM

    Thanks for your help



    ------------------------------
    leo ma
    ------------------------------