Cloud Managed Networks

 View Only
  • 1.  ClearPass Guest Login

    Posted Mar 28, 2025 12:08 PM
    Edited by James Deberardinis Mar 28, 2025 12:12 PM

    Hi Everyone,
    Fairly new to ClearPass, I've watched all of the Aruba ClearPass workshop videos (some of them multiple times), and read quite a bit of documentation.  I am struggling to get my ClearPass guest portal working, and hoping someone can help. This same problem has been asked in another thread but I am still unable to come through it.  We are using Aruba Campus Instant AP's (AP-655) and running ClearPass Policy Manager 6.12.  Upon connecting to the Guest SSID I am successfully brought to the registration page, which has a valid public certificate, no certificate warnings.  I enter a name and email address, and am presented with the account username and Guest password.  At this point I can see the account in the Guest portal manager. Now when I click login I do see the "Please wait while you are logged into the network" splash page briefly, then I am redirected to this page which just times out.

    I understand that URL is defined here, but where does that web page live?  With no DNS record for captiveportal.mycompany.com I don't even get the "Please wait while you are logged into the network".  If I make a DNS record and have it set to my virtual controller, I do see that message but the result is the same, page not found. 
    This is what my access tracker is showing
    I'm clearly missing something but don't know what, any help would be appreciated! 


  • 2.  RE: ClearPass Guest Login

    Posted Mar 28, 2025 05:01 PM

    Can you try disabling Random MAC Address on the Android?



    ------------------------------
    Shpat | ACEP | ACMP | ACCP | ACDP
    Just an Aruba enthusiast and contributor by cases
    If you find my comment helpful, KUDOS are appreciated.
    ------------------------------



  • 3.  RE: ClearPass Guest Login

    Posted Mar 29, 2025 12:02 PM
    Edited by GorazdKikelj Mar 29, 2025 12:24 PM

    As you are using public certificate, address should match CN in the certificate.

    This DNS name should point to Clearpass VIP address, if you have cluster.

    If you use wildcard certificate, then address is captiveportal-login.your.domain

    Best, Gorazd



    ------------------------------
    Gorazd Kikelj
    MVP Guru 2025
    ------------------------------