Security

Hi everyone,

I am having problems with the CPPM Guest application. I have created the web login page, configured all the needed parameters and also configured the controller part. When I want to connect to the guest network and client is redirected to https://192.168.1.98/guest/arubalogin.php (in my case) I get the error ERR_TOO_MANY_REDIRECTS. I have seen some posts about this, but still confused.

I can see in the controller that the user gets the correct initial role:

Also client gets an IP address within the guest segment and can ping the CPPM address.

However, if I connect to my office network and put in the browser the web login page https://192.168.1.98/guest/arubalogin.php, I can access the CPPM web login page with no problem.

I have checked the initial role policy and I can see it permits http and https to CPPM since destination is "any":

Do you have any idea where the problem could be?

Regards,

Julián

Did you add the ClearPass netdestination to the whitelist in the captive portal profile?

Hi Tim,

You are the man! I added CCPM to the whitelist in the captive portal profile and problem solved. I followed this guide to configure my controller 

https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-integrate-Aruba-Controller-with-CPPM-to-perform-Captive/ta-p/192291

but the whitelist point doesn't appear at all. In other guides I have also seen say nothing about the whitelist captive portal profile. Many thanks.

Regards,

Julián

Hi Tim,

I have found the problem I had. I missed to add HTTP and HTTPS reachability to the CPPM server in the initial role. When I added the ClearPass netdestination to the whitelist in the captive portal profile, it automatically created a rule for that purpose and placed it the first:

Regards,

Julián