Guest wired Authentication with captive portal

[Amr Ragab]

hello guys ,

i have a question for (guest user) as a customer want to configure a Wired authentication with captive portal from clearpass , i don't have idea about its configuration actually , hope to advise me .

thanks ^_^

[Victor Fabian]

What switch type ?

Sent from Mail for Windows 10

[Amr Ragab]

hi victor ,  aruba switch 2920

[Victor Fabian]

ACLs

class ipv4 "ALLOW-CLEARPASS-ACL"
10 match tcp 0.0.0.0 255.255.255.255 <CLEARPASS-IP> 0.0.0.0 eq 80
20 match tcp 0.0.0.0 255.255.255.255 <CLEARPASS-IP> 0.0.0.0 eq 443

exit

class ipv4 "ALLOW-DNS-ACL"
10 match udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 53
exit
class ipv4 "ALLOW-DHCP-ACL"
10 match udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 67
exit

exit
class ipv4 "ALLOW-HTTP_HTTPS-ACL"
10 match tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 80
20 match tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 443

exit

Captive Portal Policy
policy user "CAPTIVE_PORTAL-REDIRECT-POLICY"
10 class ipv4 "ALLOW-DHCP-ACL" action permit
20 class ipv4 "ALLOW-DNS-ACL" action permit
30 class ipv4 "ALLOW-CLEARPASS-ACL" action permit
40 class ipv4 "ALLOW-HTTP_HTTPS-ACL" action redirect captive-portal

exit

URL Profile

aaa authentication captive-portal profile "CAPTIVE-PORTAL-PROFILE" url "<clearpass-url>"

Captive Portal User-Role

aaa authorization user-role name "CAPTIVE-PORTAL-ROLE"
captive-portal-profile "CAPTIVE-PORTAL-PROFILE"
policy "CAPTIVE_PORTAL-REDIRECT-POLICY"
reauth-period 28800

Make sure you return the "CAPTIVE-PORTAL-ROLE" from ClearPass