Wireless Access

 View Only
  • 1.  Guest - Captive Portal without PEFNG License

    Posted Nov 06, 2018 09:03 AM

    hello,

    we have a mc cluster with a mobility master above running ArubaOS 8.3.0.3.

    Currently we do not have PEFNG licenses on the mc's.

    I tried to configure a captive portal for a guest WLAN.

    Is this possible? I have configured all settings and if I connect to the guest WLAN I have instant internet access without a captive portal page came up for logging in.

    On our Cisco ASA I have a dedicated interface in VLAN 701 and an IP as gateway (10.29.200.254).

    I have created th WLAN with the "Configuration->Tasks->Create new WLAN". It automatically creates a role named "Guest_WLAN-guest-logon" and this is configured automatically as the default role/under AAA Profiles as "Initial Role".

    This role normally only allows DNS, DHCP and ICMP.

    After connecting to the WLAN the mc gave me an ip address and I got the role "logon".

    I am new to the Aruba WLAN, so I have no clue about the role topic.

    I have already read the "Guest Access with ArubaOS manual" provided by Aruba.

     

    So my question is: does it not work because of the missing PEFNG license?

     



  • 2.  RE: Guest - Captive Portal without PEFNG License



  • 3.  RE: Guest - Captive Portal without PEFNG License

    Posted Nov 06, 2018 09:53 AM

    Ok i tried the CLI way. The first three steps were accepted, but i couldn't add "initial-role c-portal". I tried it exactly that way. I got the message: Error: Role 'c-portal' is Unknown.

     

    (host) [md] (config) #aaa authentication captive-portal c-portal

    server-group cp-srv

    (host) [md] (config) #aaa profile aaa_c-portal

    initial-role c-portal

    (host) [md] (config) #wlan ssid-profile ssid_c-portal

    essid c-portal-ap

    (host) [md] (config) #wlan virtual-ap vp_c-portal

    aaa-profile aaa_c-portal

    ssid-profile ssid_c-portal
    vlan 20