Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Guest stuck on CPG-login

This thread has been viewed 3 times

  • 1.  Guest stuck on CPG-login

    Posted May 29, 2020 09:54 AM

    Hi all

     

    we have an issue in a old Aruba solution

    Aruba 7210 version 6.5.3.3 , and clearpass 6.5.7

     

    Everything is working ok , we just adjust some roles for  whatsapp video not woriking in corporate network

     

    after that , don't know why guest users get to the captive portal , login with a user and password and they do not proceed to get the guest role..

    can you help?

     

    see attached a show user that is stuck and a copy of the page the user gets.

     

    with was working before 

     

    regards

     

     



  • 2.  RE: Guest stuck on CPG-login

    Posted May 29, 2020 10:05 AM
    Looks like you need to replace the default controller captive portal certificate with a well-known third party cert




    Thank you

    Victor Fabian

    Pardon typos sent from Mobile


  • 3.  RE: Guest stuck on CPG-login

    Posted May 29, 2020 10:20 AM

    Victor

     

    can you explain me ? 

    we are going to migrate this until end of summer with new mobility master architeture and new clearpass also

    Can I workaround until that time? how to change the certificate. is that on the controller. what changes need to be done?

    I have more than 100 ap's and the guest is not working

     

    Regards

     



  • 4.  RE: Guest stuck on CPG-login

    Posted May 29, 2020 10:32 AM

    The problem is that the controller does not jump to the user role guest as is configurated..

     

    it is stuck on CPG-login



  • 5.  RE: Guest stuck on CPG-login

    Posted May 29, 2020 10:52 AM
    Yes but that is because the certificate needs to be replaced : https://community.arubanetworks.com/t5/Controller-Based-WLANs/ArubaOS-Default-Certificate-Revocation-FAQ-Controllers/ta-p/275809

    Sent from Mail for Windows 10


  • 6.  RE: Guest stuck on CPG-login

    Posted Jun 03, 2020 12:32 PM

    Hi Can we use https client certiicate that is on Clearpass installed ?

     

    Is the certificate needed installed on Mobility Controller?

     

    Regards



  • 7.  RE: Guest stuck on CPG-login

    Posted Jun 03, 2020 12:36 PM
    No, you need a unique well-known third party cert for the controller.

    Yes, the same cert can be installed on all your controllers



    Thank you

    Victor Fabian

    Pardon typos sent from Mobile


  • 8.  RE: Guest stuck on CPG-login

    Posted Jun 04, 2020 08:39 AM

    victor

     

    Sorry for this , but could you tell me where can I find one just for testing? 

    then is installed on the controller. any more changed needed? on clearpass for example?

     

    regards



  • 9.  RE: Guest stuck on CPG-login

    Posted Jun 04, 2020 09:37 AM
    You can buy certs now days for cheap

    https://www.ssls.com/?gclid=CjwKCAjwt-L2BRA_EiwAacX32RJ4mn_FdC_XysMzxXCYIHZp6QCiUwo-UYzHcPUTYldBhMml7uuhLBoCZpgQAvD_BwE



    Thank you

    Victor Fabian

    Pardon typos sent from Mobile


  • 10.  RE: Guest stuck on CPG-login

    Posted Jun 04, 2020 11:20 AM

    Great 

     

    So a Basic HTTPS is ok? No special requirements for the certificate to put on the controller?

     

    regards



  • 11.  RE: Guest stuck on CPG-login

    Posted Jun 04, 2020 11:37 AM
    No , just need a basic SSL cert
    Sent from Mail for Windows 10