I'm trying to setup Guest access on an Instant AP using ClearPass Guest.
The IAP has a VPN connection back to a controller, to access "corporate" resources.
The ClearPass server is on a VLAN accessible through the VPN.
I have a normal Employee SSID setup on the Instant (WPA2 personal), which I have verified that the VPN connection is up and working. All VLANs can be accessed when on that SSID.
I used the video "Captive Portal Authentication with Aruba Instant and ClearPass"
I'm having trouble with some basic connectivity back through the VPN to my corporate VLANs. Even if I temporarily set access rules of logon roles to "allow all".
Question would be if the VPN to the controller is not usable from a Guest SSID?
If not, is there any alternative, other than moving the ClearPass server to a location accessible outside the "corporate" VLANs.
Regards,
Colin