Security

Afternoon all,

I am trying to understand if its possible to have the registration page on a ClearPass network automatically "pop-up" after someone connects to the network.

 

At the moment, our sales guys will connect to the guest network, then assume that they are connected. Forgetting that they then have to authenticate to gain access to the internet.

 

In hotels / airports, when you connect you are then automatically thrown to a connection page that you have to authenticate / agree to before you are allowed to surf. Is this possible on Aruba?

 

Thanks in advance for your support

What type of controller are you using ?

Get Outlook for iOS

We have an Airwave installed, in a virtualised environment.

 

Sorry if thats not what you are asking

I understnad the currently in your location guest users connect to guest SSID with out going through the registraiton page and you want to configure self registratoin page for guest network using Aruba?

 

If you are using Aruba Clearpass server it is possbile to set up guest self registration page, so when ever a user connects , it will redirect to page where it will ask to enter credentails or accept the terms and condtions to allow access to network.

 

Regards,

Pavan

If my post address your query, give kudos:)

Morning,
We currently have a guest network, yes.

The users connect to this network, then they have to open a browser, go to a site such as bbc.co.uk and then - and only then - it will ask them to enter self register. Our users are forgetting the 2nd stage - hence complaining the process is very negative and giving is bad rep.

I've seen on other such sites that as soon as you connect to the SSID, it automatically opens the browser taking you to the registration page.

Can Aruba CP achieve this?

Thanks
John

Automatic pop-up of the registration page / captive portal page may depend on the client. For example, when IOS detects that it does not have internet access, its automatic logic Captive network assistant(CNA) will pop-up and will display an authentication page, without opening a browser. Since this is not an actual browser, we have an option to disable this from ClearPass Guest Registration/login page.

 

To check, please navigate to ClearPass Guest --> Configuration --> Pages --> Guest Self registration. Highlight and edit the page and check for the option 'Prevent CNA'. If it is enabled, you may disable and test it from an Apple client.

 

 

Brilliant! Works a treat!

Is there a similar way for Android? Probably not but its worth the ask

Thank you

It appears androids does have similiar logic, but from CPPM, we don't have any options to block this logic, as we do for IOS clients. So, the devices should automatically pop-up the 'Sign-in to Wi-Fi Network' prompt. 

Ref: http://android.stackexchange.com/questions/123129/how-does-wifi-in-android-detect-if-the-device-has-to-sign-in-or-not

You can bypass the captive portal on Android by permitting HTTP and HTTPS for the following netdestinations in your user-role.

 

Please note that this MAY also allow access to certain parts of the Google Play store due to the shared platform on Google's end.

 

netdestination android-cp-bypass
    name android.l.google.com
    name clients.l.google.com
    name connectivitycheck.android.com
!