Wireless Access

Hi everyone,

I've some RAP's when i provisioned locally the users are getting Amigopod page also getting authenticated by clearpass.

But when i provisioned the RAP's in public, the users are getting IP address from local dhcp server but not able get Amigopod page.

When i checked the firewall hits all the users are getting into default role(authenticated) not getting an amigopod profile.

aaa profile "Amigopod-AAA"
   initial-role "guest-logon"
   authentication-dot1x "default"
   dot1x-server-group "Amigopod"
   radius-accounting "Amigopod"
   radius-interim-accounting
   rfc-3576-server "192.168.0.29"

user-role guest-logon
 captive-portal "Guest-Amigopod"
 access-list session Amigopod
 access-list session captiveportal
 access-list session logon-control

aaa authentication captive-portal "Guest-Amigopod"
   server-group "Amigopod"
   redirect-pause 3
   login-page "https://192.168.0.29/Login.php"
   welcome-page "http://www.transguardgroup.com"
   switchip-in-redirection-url

user-role guest
 access-list session https-acl
 access-list session dhcp-acl
 access-list session dns-acl
 access-list session split

Kindly advise where am doing mistake?

Does the AP end up in the same ap-group when it is internal vs. external?

Yeah the same Group....

wlan virtual-ap "TG_Camps"
   aaa-profile "Amigopod-AAA"
   ssid-profile "TG_Rap-ssid_prof"
   vlan 103
   forward-mode split-tunnel

When you say "provisioned locally" what do you mean?

When i connected the RAP in local network it was working, when it was in over public network it won't.....

And i found the issue... actucally portchannel is configured on controller for two ports which is connected to HP A series switch when i disabled portchannel it's working fine....... STRANGE behaviour!!!!

Any idea that we need to check aruba confign coz switch guy was telling everything fine from his side???