How do I get non-http devices (such as printer) to connect to guest captive portal SSID?

Aruba Employee
Aruba Employee

Environment : This article applies to the environment where a printer in guest facility has to be connected to guest captive portal SSID.


Today, as we know, captive portal is the most common form of authentication method for guest networks. Therefore, sometimes this method of authentication might stop non-http devices like Printers, Wireless Camera's in Guest Lobby and other devices from connecting to network.

Some WLAN administrators might take an other approach by creating an additional SSID in parallel with guest wireless network. This solution however results in an increase in beacons and management traffic which degrades in air quality and airtime availability.

This article helps WLAN administrators in two ways:

  • By not setting up an additional SSID just for connecting the printer or non-http devices.
  • Bypassing captive portal authentication for Printer using a MAC Address based User Derivative Rule.


MAC Address based User Derivative Rule gets applied before captive portal and hence these devices can be assigned a different role that do not have captive portal mapped to it. 


Refer the below article on the support site that would help to create OUI based User Derivation Rule (UDR):

NOTE:  An Organizationally Unique Identifier (OUI) is the 24 MSB (Most Significant Bit) of MAC Address that uniquely identifies a vendor, manufacturer, or other organization globally or worldwide. This
can be obtained from device documentation or from the station table on the controller ("show station-table") when the device tries to connect.


Version history
Revision #:
1 of 1
Last update:
‎06-26-2014 05:23 PM
Updated by:
Labels (1)
Search Airheads
Showing results for 
Search instead for 
Did you mean: