Wireless Access

Occasional Contributor II

External Captive Portal Issues after 3600 upgrade from to

Hi Airheads Community!


I hope you can help me with this one.


I have a network with Master/Local configuration of remote AP105s using split-tunnel and external captive portal/radius (not clearpass). Captive portal traffic pre-auth is tunneled back to the datacenter where the 3600s are hosted (from what I understand this is how it had to be set up), and post-authentication traffic is split locally to the broadband circuit.


The environment was running smoothly but we opted to give a try and upgraded from When upgrading all went well and all APs came  online. A quick test of a lab AP confirmed that captive portal and browsing was successful. In the morning though we began getting reports that guests were having trouble getting the captive portal and were often getting a blank white screen instead of being re-directed to the captive portal.


Does anyone have any ideas as to why this could be? Unfortunately due to the mass issues we had to do an emergency downgrade back to the partition, but I will try to provide any further details if someone has a question for me to chase down.



part 1/2

Occasional Contributor II

Re: External Captive Portal Issues after 3600 upgrade from to

Part 2/2.


While troubleshooting I found a few tidbits that lead me into further questions about how L3 Auth should properly be configured on controllers.


1) Do any settings here stand out as incorrect or not best practice?http://screencast.com/t/tLFnjAFh


2) What is the difference between the "welcome page" and "redirect url" ? How does the checkbox affect the user experience? http://screencast.com/t/WBSsGtkR


3) What are the correct and recommended values here? Do these values affect my guest traffic that is being tunneled back and slow the captive portal traffic? (Values shown were me testing, but not having any better results) [picture from Advanced Services>Stateful Firewall>Global Setting.]http://screencast.com/t/fmbeQivx



Thanks for the help!

Occasional Contributor II

Re: External Captive Portal Issues after 3600 upgrade from to

Any help here?

Guru Elite

Re: External Captive Portal Issues after 3600 upgrade from to

Please open a support case in parallel.  Without the logs.tar it would be painful to try to figure out exactly what happened.  We do not have your topology and split-tunnel captive portal is more complicated to troubleshoot than regular captive portal.

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Search Airheads
Showing results for 
Search instead for 
Did you mean: