Wireless Access

Hi ,

Infact I’m having an issue when configuring Captive Portal.

I followed below link to know how to configure it.

https://www.arubanetworks.com/techdocs/ArubaOS_80_Web_Help/Content/ArubaFrameStyles/Captive_Portal/Captive_Portal_Authentic.htm

But I’m getting error “feature is not enabled in the license”

When I try same on CLI, I get "Role 'guest-logon' is user defined, and can't be applied without Next Generation Policy Enforcement Firewall"

Do I need to need a license to be able to configure Captive Portal ?

Thanks

User roles are not available when you do not have the PEF (Policy Enforcement) license.  That means you cannot create a captive portal with the manual instructions you listed above.  You can go to Configuration> WLANs and create the captive portal that way.

I tried doing it like that. But still i'm getting error.

Can you guys help as im a newbie to this.

Find attached pic for the error

That is a bug.  Which version of ArubaOS are you running?

8.3.0.0

Please try upgrading to 8.3.0.3 and see if you have the same issue.

Just upgraded it, issue still persists.

Unfortunately, the frontend is not fixed as of yet to allow WLAN creation without the PEF license.  You can either:

(1) Obtain a temporary PEF license or

(2) Create the WLAN on the commandline:

You can try in CLI as below

config t

aaa authentication captive_protal cp_Prof)
aaa profile cp_aaa initial-role cp_prof)
wlan ssid-profile cp_ssid)
wlan virtual-ap cp_vap
ssid-profile cp_ssid
aaa_profile cp_prof)

Then you would assign the Virtual AP profile to the default ap-group:

config t
virtual-ap cp_vap 

check the error I got. 

How i can get temporary PEF license ?

(Aruba7205) *[mynode] (config) #aaa authentication captive-portal cpProf72
(Aruba7205) ^*[mynode] (Captive Portal Authentication Profile "cpProf72") #aaa profile cpaaa72 initial-role cpProf72
(Aruba7205) ^*[mynode] (config) #wlan ssid-profile cpssid72
(Aruba7205) ^*[mynode] (SSID Profile "cpssid72") #wlan virtual-ap cpvap72
(Aruba7205) ^*[mynode] (Virtual AP profile "cpvap72") #ssid-profile cpssid72

(Aruba7205) ^*[mynode] (Virtual AP profile "cpvap72") #aaa-profile cpProf72
AAA Profile "cpProf72" does not exist.

Speak to TAC who can generate a evaluation PEFNG license.

Hi guys,

Finally it worked.

1) Enable PEF feature on Licensing Tab.

2) Configure captive portal on WLAN

3) Provision the AP

4) Disable features ( if you don't disable it, OTHER  APs will stop broadcast ssid as you don't have license for PEF)

5) Re-provision other Aps

Hi,

if you follow that guide, you need a PEF license per Accesspoint.

Without this license, you can not create or edit roles.

Captive portal can be done without these licenses, by using the built in roles (without editing them). But I recommend against this. Because I didn't bother doing this, I cannot provide a link to information, how this has to be done.

Regards, Jörg