Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Timeout on guest portal with Instant

This thread has been viewed 1 times

  • 1.  Timeout on guest portal with Instant

    Posted Aug 25, 2019 02:59 PM

    Hello,

     

    I am wondering if it's possible to have the following use case/scenario supported on Instant.

     

    I want a captive portal where a user just has to click acknowledge. However, after a period of time (x hours), I want to user to get kicked off and have to click through the terms again.

     

    Is this possible to do using only Instant without clearpass? I found some info that indicated that this might be possible setting the reauth interval. However, I tried setting this to 5 minutes, and even after 5 minutes my devices can still browse without haveingto go through the captive portal acknoledgement page again.

     

    Thanks for the help! 



  • 2.  RE: Timeout on guest portal with Instant

    EMPLOYEE
    Posted Aug 25, 2019 04:31 PM

    Try an reauth interval longer than the inactivity time (1000 seconds by default).



  • 3.  RE: Timeout on guest portal with Instant

    Posted Sep 03, 2019 05:48 PM

    I gave that a shot and it doesn't seem to be working

     

    For testing, I now have an inactivity timeout on the SSID of 5 minutes, I have the option to deauth inactive clients checked, and I have a reauth interval of 7 minutes. This is all with MAC auth on that SSID.

     

    If I connect a client and wait >7 minutes, the client is still able to browse without getting the captive portal page again. It looks like if I totally disconnect and reconnect, I get the portal page, but I want this to take place mid-browsing if the reauth interval period is exceeded,