Controllerless Networks

Hi

Is it possible for an IAP to push proxy settings to 'guest' users that authenticate against the internal radius server?  I believe that this is possible on a controller and it can push a proxy.pac file via the internal DHCP server using option 252.

It is for a school that all traffic must be filtered via the proxy.

Any help much appreciated

David

Hi friend,

Yes it is possible through CLI,

1. Create a DHCP profile with required configuration as shown bellow,

here DHCP profile name is testdhcp.

2. Map this profile to the guest SSID.

3. Define the pac file properly.

Hope you got your answer,

Please feel free for any further query on this.

HI Venu

Many thanks for the reply.  Can you explain more on your point 3). Define the PAC file properly? 

Is the proxy.pac file uploaded to the controller?

On you example is the IP address 172.16.8.4. the virtual controller?

I look forward to hearing from you, sorry that I have very limited knowledge on this!

Regards

David

Hi,

The IP address in the example is the VC IP address and we need not create and upload any .pac file like in a controller.

you can configure the proxy server address and the port number in IAP directly as shown bellow.

Select "System--Advanced options--Proxy"

Please feel free for any further help on this.

HI

Sorry two more questions!

1). Do I need to set up a DHCP scope on the VC before I run the dhcp option 252 commands on the CLI?  If so do I set up a centralised, distributed or local dhcp scope.

2). When you said that 172.16.8.4 is the VC IP address, did you set this up as a static IP in the SYSTEM-GENERAL?

Your help and pateince is much appreciated.

Thanks

David

Ok,

Let me help you on this,

1. Open "DHCP server" page ( More-->DHCP server)

2. Create a new local DHCP as shown bellow,

here type should be "Local", select Guest VLAN, enter guest subnet and mask

Here you can select the option type ( 252) and you can enter the path for the proxy .

3. map this dhcp to the Guest SSID, as shown bellow,

4. ensure that the proxy is configured in the IAP as shown bellow ,

Hope got more clarity on this,

Please feel free for any further help on this.

Hi

We are using an IAP with firmware 6.3.1.8-4.0.0.8_46401 and when you create the new WLAN, under VLAN (Client and VLAN assignment) there is only the option for

Client IP Assignment -Virtual Controller managed and Network assigned.

The Client VLAN assignment radio buttons are not present to allow you to custom select the 'testdhcp(valn1) dhcp scope.

Do you know if this has been moved to somewhere else?

Thanks