Controllerless Networks

 View Only
last person joined: yesterday 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

Instant - Captive Portal possibilities (AD Login/device caching)

This thread has been viewed 5 times

  • 1.  Instant - Captive Portal possibilities (AD Login/device caching)

    Posted Jun 15, 2017 12:53 PM

    Hi all, need someone to refresh my memory.  

     

    1. Can instant captive portal do AD auth or is it only local user based?

     

    2. Also, can instant captive portal do mac/user caching so they do not have to login again?

     

    I know ClearPass can do this, but cant remember the basic functionality for Instant. 

     

    -N



  • 2.  RE: Instant - Captive Portal possibilities (AD Login/device caching)

    Posted Jun 16, 2017 07:03 AM

    1. Instant captive portal supports AD auth via either LDAP or RADIUS.

     

    2. Yes, but you'll need an authentication server that stores the list of users/MAC addresses such as ClearPass.

     



  • 3.  RE: Instant - Captive Portal possibilities (AD Login/device caching)

    Posted Jun 21, 2017 11:47 AM

    So I was able to get this to work but it seems like any AD auth via the captive portal only uses PAP. Is there a way to change this?

     

    N



  • 4.  RE: Instant - Captive Portal possibilities (AD Login/device caching)

    EMPLOYEE
    Posted Jun 21, 2017 08:03 PM

    Captive Portal requires pap.  The username is in clear text, but the controller encrypts the user password using the RADIUS shared secret.  That is why it is important to choose a complicated radius shared secret.  If you want better encryption, you should move to 802.1x.