Wireless Access

Hi team,

After reading many entries about this problem I´m still unable to achieve it.

If in the pre-logon role permit only:

- dhcp
- dns
- acces to captive portal

The captive portal pops, auth works but unable download quick connect from google play.

If in the pre-logon role add permission to:

rule 172.25.70.169 255.255.255.255 match any any any permit
rule alias android.clients.google.com match tcp 443 443 permit
rule alias googleapis.com match tcp 443 443 permit
rule alias gvt1.com match tcp 443 443 permit
rule alias ggpht.com match tcp 443 443 permit
rule alias googleusercontent.com match tcp 443 443 permit
rule alias gstatic.com match tcp 443 443 permit
rule alias clients.l.google.com match tcp 443 443 permit
rule alias accounts.google.com match tcp 443 443 permit
rule alias accounts.youtube.com match tcp 443 443 permit
rule alias connectivitycheck.android.com match tcp 80 80 permit
rule alias connectivitycheck.android.com match tcp 443 443 permit
rule alias connectivitycheck.gstatic.com match tcp 80 80 permit
rule alias connectivitycheck.gstatic.com match tcp 443 443 permit
rule alias www.google.com match tcp 443 443 permit
rule alias www.google.com match tcp 80 80 permit

From "https://github.com/aruba/clearpass-cloud-service-whitelists/blob/master/onboard/onboard_android.md"

The captive portal doesn´t pop.

I´m unable to find the right combination/way.

Aruba instant running release 6.5.4.3

Regards,

EF

I'm assuming you want the captive portal to display & still allow access to Google Play.  Have you tried removing those connectivitycheck URIs?

finally I tested adding rule by rule, and seem to be necessary the most of then for download the APP QuickConnect from Google Play.

The problem is that, with most of the rules loaded, the captive portal doesn´t popup and is confused for the user to launch it, they must navigate to other page from the smartphone.

Besides I found another problem in our smartphones, after download and install QuickConnect APP, you must give aditional rights to the APP in the smartphone administration section because the given in the APP installation aren´t enought to make it works.

As a summary in our Android devices:

1.- The captive portal doesn´t popups automatically.
2.- You must login in the onboard proccess twice, one for install th APP and give aditional rights and the second for dont load the configuration profile.

It´s a very complex process for the users.

Regards

EF