Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Guest users from local controller not redirecting to captive portal

This thread has been viewed 1 times

  • 1.  Guest users from local controller not redirecting to captive portal

    Posted Feb 26, 2013 07:36 PM

    I have a setup usiing mater / local enviorment where guest user's traffic comes only into master controller and then redirect to captive portal (clearpass) for self register/logon process.

     

    This works well for users on master controller, but not from local controllers. Users are getting DHCP and they can resolve DSN as well. But they failed to redirect to captive portal and times out when open a web browser. 

     

    DHCP server for guest is on master controler. GRE tunnel created to port guest traffic from local controller and spitting into guest VLAN.  GRE tunnel trusted on local side and untrusted at master side.

     

    config extract as below

     

    Local Controllre

     

    interface tunnel 101
    description "Tunnel Interface"
    tunnel source loopback
    tunnel mode gre 0
    tunnel destination 10.99.40.99
    trusted
    mtu 1500
    tunnel vlan 32

     

     

    Master Controller 

     

    interface tunnel 101
    description "Tunnel Interface"
    tunnel source loopback
    tunnel mode gre 0
    tunnel destination 10.99.30.99
    mtu 1500
    tunnel vlan 32

     

     

    Thanks inadvance



  • 2.  RE: Guest users from local controller not redirecting to captive portal
    Best Answer

    Posted Feb 26, 2013 08:15 PM
    Does the local controller have an IP on the client VLAN? It is required for captive portal redirects.


  • 3.  RE: Guest users from local controller not redirecting to captive portal

    Posted Feb 26, 2013 08:49 PM

    Thanks heaps,  adding IP address to client vlan on local controller solve the issue. 

     

    Since client vlan on local bridged to client vlan on master via L2 GRE tunnel, I didn't see any requirement for IP address on local side.

     

    Cheers