Controllerless Networks

We have a WIFI based on IAP 205

We need to make a very simple setup for a guest network with the following requirements:

- Guest connects to SSID "XX Guest"

- Splash page is automatically shown.

- Splash page is an external website, with a email subscription form. There are external references on the website, such as webfonts, submission page etc, that shoould all work.

- Guest is not required to submit the form, but should have unlimited access from the start.

I have been trying to set this up using:

- Spash page type: External

- Captive portal: Authentication Text

- IP and URL for the splash page 

- Captive Portal Failure: Allow internet

- Auth text: velkommen (random text from the website)

- Auth Server: None

With these setting the splash page either does not open at all, or sometimes open an adress called "http://www.msn.com/da-dk/?ocid=wispr".

Where can I find documentation as for how to set up IAP for this purpose?

while i look further for you, can you check hosting the attached pages instead of your own page on the external web server?

the instructions on using these pages with a controller in data center are attached. You can take a cue from that on how to use the pages.

I understand you need just an email ack, and i am checking on page format that can work for it.

Attachment(s)

InstantCPv8.2-NoCSS-Error.zip   74 KB 1 version

Guest access solution with IAP’s GRE tunnels with DMZ con...docx   2.30 MB 1 version

I will try your files and get back to you. 

A lot of the descriptions include a controller, is that required?

Just one comment, actually no acknowledgement is needed. The guest can choose to enter their email or simply just leave the splash page and should still be online after this.

We have set up a simple splash page on iap-205. 

It has been set up with an external portal hosted on a http site. 

For smartphones (iphone, Android etc) the captive portal pops up correctly upon connecting to the SSID, and the login form also works. 

When connecting from a Windows 10 computer no pop ups come up automatically and when opening any browser, Chrome or IE give a failure. Only by manually typing a non-https address the captive portal comes up.

Is the any way to force trigger the Captive Portal detection in these browsers?

Check this:

http://blog.superuser.com/2011/05/16/windows-7-network-awareness/

& you can set http as home page of the browser.

Thanks, I got it to work on Windows computers by deleting msftncsi.com from the whitelist (other posts I have found said that it HAD to be whitelisted in order to detect captive portal, but that turned out not to be the case.). It is a guest network, so it is not possible to prepare the devices with non-http start pages.

Another problem has emerged though.

The Reauth interval is set to 546 hours, but after 15-20 minutes the guests lose connection and get the captive portal again. How can I set the controller to "remember" the clients for a certain amount of time?

Users are initially granted access by submitting a form with the following code:

<form method=POST action="http://securelogin.arubanetworks.com/cgi-bin/login">
<span class="bodytext">
<input id="user" name="user" value="guest" type="hidden" accesskey="u" /><br>
<input id="password" name="password" value="wRcre3eQhgc" type="hidden" accesskey="p" />
<input name=cmd value="authenticate" type="hidden">
<input name=mac value="" type="hidden">
<input name=ip value="" type="hidden">
<input name=essid value="" type="hidden">
<input name=url value="http://www.arubanetworks.com" type="hidden">
<input type="submit" name="Login" value="Login" class="button" onclick="redirect()" />
<script>
function redirect()
{
window.location='www.zxzxzxzxzx.com';
}
</script>
</span>
</form>

kindly share a show tech, i want to take a look at how you have set the timer you are referring to.

Hi, it is attached to to my last post, reauth interval is set to max.

Should I change Inactivity time out under the WLAN settings for the ssid as well?

Can you  change inactivity timer and try again please.

Changing the Inactivity time seems to have helped, guests are not thrown off so often anymore.

Another problem has emerged though, a lot of guests have problems logging in with a normal Windows laptop.

I suspect that security software and settings can be a factor here, since the connection is unencrypted. Is there any way to make the connection encprypted when using a simple external portal? The login page is based on the code mentioned above.

I would be happy to hear about alternative recommendations for a captive portal solution. 

The captive portal's one purpose is to log the guest's email address and to have dem answer 2 questions before getting access.

So your question is can using IAP, splash page be hosted on external server and accessed via http and not https. correct?