Controllerless Networks

Can this be setup?  We currently use Amigopod (with AP125's) and configure all settings via the controller its pointing back to.  DHCP, login page, welcome page, firewall rules,  etc..all config'd on the master controller.  We add the NAS device on Amigopod and all works well.  But with the IAP's, its a virtual controller.  Can we mimic same setup? 

Yes you can use Amigopod for CP behind a instant network. The Virtual controller IP will become the NAS IP on the amigopod.

Regards,

Sathya

ok.  I have set it up on the IAP Virtual Controller.  for client IP Assignment, I chose 'Virtual Controller Assign' .  We do not want the Guest users getting an internal IP.  The clients are getting a 172.16 address, where is it getting that from?  also, we use the Aruba controllers for all captive portal options.  Do I have to configure Amigopod for Captive Portal?

think i got it..will do some testing. thx

ok, Guest is broadcasting, client is getting 172.16 address, however, cannot access the Web.  What port do I use for the external splash page?  Im using 1812

select port 80. You must also enable dynamic radius proxy under the advanced settings tab. The dynamic radius proxy ensures  that all RADIUS traffic is sourced from the virtual controller IP address and not from the individual IP addresses of each Instant access point. 

I know you will not be comfortable using port 80 and want to use 443, but this will cause an error. So the work around for this is to goto

 Amigopod and on Administrator > Network Setup > Login Access page,select the Require HTTPS for guest access checkbox. With this setting enabling all attempts to access a guest Web Login or Self Registration page will automatically be directed to HTTPS if not already using this protocol.

Regards,

Sathya

Still not redirecting to the Amigopod welcome page.  Might be an issue with DNS.  We use public DNS for guests, cant ping it.  I have the firewall temporaily set to unrestricted so I dont think ICMP would be blocked at this point.

That might be an issue. To remove DNS from the picture, in the IP or Hostname field of the external splash page settings use the IP of the amigopod server instead of FQDN. To make sure you can ping amigopod, the pre-auth role should allow icmp.

Regards,

Sathya

I am using IP for IP/hostname, using hostname for URL

In the /URL field don't enter the hostname. For instance if the login page on the Aimogpod is http://10.x.x.10/Aruba_Login.php  (you will give the entire URL on the controller's CP profile), in the instant setting the IP/hostname field should have the IP and the /URL field will have /Aruba_Login.php (don't give the hostname or ip again). Now if you combine the  Port (80), IP (10.x.x.10), and URL (/Aruba_Login.php)  fields on the instant you will get http://10.x.x.10/Aruba_Login.php.

Regards,

Sathya

still does not work.  No Internet access..its not redirecting to the Amigopod Login page.

what I dont get is..when I choose the Virtual Controller to assign a private IP.. it actually gets an IP from a segregated VLAN off the internal network.  How is the client going to hit an internal address if by design internal access is blocked.  Its getting an IP from a non-routable VLAN

Please drop me a note and I can verify your configuration over the phone or email.

Shashi Sastry

ssastry@arubanetworks.com

Issue resolved.  Must use port 80 (even though it will be using 443)  Tiny Proxy does not support port 443.

--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

----------------------------select port 80. You must also enable dynamic radius proxy under the advanced settings tab. The dynamic radius proxy ensures  that all RADIUS traffic is sourced from the virtual controller IP address and not from the individual IP addresses of each Instant access point. 

I know you will not be comfortable using port 80 and want to use 443, but this will cause an error. So the work around for this is to goto

 Amigopod and on Administrator > Network Setup > Login Access page,select the Require HTTPS for guest access checkbox. With this setting enabling all attempts to access a guest Web Login or Self Registration page will automatically be directed to HTTPS if not already using this protocol.

Regards,

Sathya

------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------

Thought i made it clear in this post that you have to use port 80. I was thinking you were already doing that. Anyways, it good to hear that the issue is resoved.

Regards,

Sathya



Hi all!

I have same issue.

My IAP-105 and Amigopod has a newest FW&SW.

There is one IAP-105 (static 192.168.1.2, trunk (VLAN-101 - native mgt, VLAN-102 - for users), GW 192.168.1.254) and Amigopod (LAN, static 192.168.1.1, VLAN-101, GW 192.168.1.254).

On IAP-105 I have created Guest_102 WLAN (direct to Cisco 871, VLAN-102, GW/DHCP 192.168.2.254).

Without Captive Portal on IAP-105 my notebook gets IP from VLAN-102 successfully. IP of IAP-105 and Amigopod's login web page https://192.168.1.1/login.php is reachable.

When I activate on IAP-105 the CP with external radius (Amigopod) and internal web page all works fine. Amigopod's login web page https://192.168.1.1/login.php is reachable.

When I activate on IAP-105 the CP with external radius (Amigopod) and redirection to https://192.168.1.1/login.php my notebook displays:

Trouble with downloading a page.

https://192.168.1.1/login.php?cmd=login&mac=08:ed:b9:12:f0:b9&essid=Guest_102&ip=192.168.2.2&apname=instant&vcname=Instant-C8%3AFD%3A76&url=http%3A%2F%2F192.168.1.89%2F

Where:
https://192.168.1.1/login.php - Amigopod's login web page
mac=08:ed:b9:12:f0:b9 - MAC of my notebook
essid=Guest_102 - Guest WLAN name
ip=192.168.2.2 - IP address of my notebook from DHCP (Cisco 871)

url=http192.168.1.89 - IP address of local web-server.

What does it mean?

I have attached screen from IAP-105 and screen from Wireshark (IAP-105 <-> Amigopod)

It's works now!

"So the work around for this is to goto

 Amigopod and on Administrator > Network Setup > Login Access page,select the Require HTTPS for guest access checkbox. With this setting enabling all attempts to access a guest Web Login or Self Registration page will automatically be directed to HTTPS if not already using this protocol."

In my issue I have unchecked "Require HTTPS for guest access checkbox"

Thanx!