Security

Hi, 

I followed the following video to configure self registeration page, what happened when I test is that the self registration page loads, registeration suceed , a username and PW is generated, and login also suceed but after login I am redirected back to the self regsitration page endlessly.

https://www.youtube.com/watch?v=jXyd_q7T7aE&list=PLsYGHuNuBZcb0xD05v9zdwv7NlUG_8oJS&index=17

 

In redirect URL have you provided same guest self registration URL?

 

Redirect URL

Specify a redirect URL if you want to redirect the users to another URL.

Try changing the default certificate on the IAP
https://community.arubanetworks.com/t5/Controller-less-WLANs/ArubaOS-Default-Certificate-Revocation-FAQ-Instant/ta-p/275814

Sent from Mail for Windows 10

Hi guys, it finally worked, 

please see the attached document, in the address field I had configured the IP address of the instant access point.

But when I change it back to securelogin.arubanetworks.com, it worked, and I dont understand why.

Had the same problem, o got a different solution for myself.

 

If you are interested:

 

https://community.arubanetworks.com/t5/Security/IAP-ClearPass-Self-Registration-Captive-Portal/m-p/549661/thread-id/45105/highlight/false#M45128

 

So no clue why in the address field it should be entered "securelogin.arubanetworks.com"?

The domain securelogin.arubanetworks.com is used to send the credentials of the user to the IAP. The IAP uses those credentials to authenticate the user and allow network access. 

In ClearPass, you should see an authentication request in the access tracker. 

The Domain name needs to be aligned with the certificate CN of the Captive Portal Certificate on the IAP. 

Hi,

 

I understand.

But In fact, without "dynamic Address" under "Nas Vendor Settings" I can not see any auth request.

 

So, what is the difference between: with dynamic address and without ?

from My understanding this is needed as the controller ip of the iap can change depending to which iap you are connected.

But how do the ClearPass resolves the domain securelogin.arubanetworks.com to the IP address of the IAP or the controller?

It doesn't. The IAP handles it.

 

Also, you should never be using the default certificate.