Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Guest Portal registration / access

This thread has been viewed 51 times
  • 1.  Guest Portal registration / access

    Posted Nov 02, 2022 07:47 AM
    Hi,

    I'm configuring a Guest Portal in Central using email registration etc. I recieve an email with the code and get the following after entereing the code...
    I'm not really sure about capture parameters ?
    Thanks
    Dave


  • 2.  RE: Guest Portal registration / access

    MVP GURU
    Posted Nov 02, 2022 08:23 AM
    Are you testing from a real client and not just the configuration window? Usually you see this when your not an actual client going through the guest flow. It needs o capture the MAC of your client.

    Also, you have to allow TCP port 2083 for cloud Guest Authentication out to the internet if you don't already.

    ------------------------------
    Dustin Burns

    Lead Mobility Engineer @Worldcom Exchange, Inc.

    ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022
    If my post was useful accept solution and/or give kudos
    ------------------------------



  • 3.  RE: Guest Portal registration / access

    Posted Nov 02, 2022 08:47 AM
    Thanks Dustin, testing from a real client now ! I got the device lisited in the Guest access>Visitors session list but the device displayed Web Page not available, https://euw1.cloudguest.central.arubanetworks.com/portal/scope.cust- etc etc...
    TCP 2083 is allowed


  • 4.  RE: Guest Portal registration / access

    MVP GURU
    Posted Nov 02, 2022 09:25 AM
    Have you tried toggling between default and aruba_default for the captive portal certificate? The aruba_default should be a public cert, and not self generated.



    ------------------------------
    Dustin Burns

    Lead Mobility Engineer @Worldcom Exchange, Inc.

    ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022
    If my post was useful accept solution and/or give kudos
    ------------------------------



  • 5.  RE: Guest Portal registration / access

    Posted Nov 02, 2022 10:35 AM
    Thanks Dustin, we're set for aruba-default in Cert Usage, also I just wanted to check , in our Guest-Portal ssid, under Access we have Role Assignments for Authenticated Users set as disabled, should we still be able to connect to the portal with this setting ?
    Thanks.


  • 6.  RE: Guest Portal registration / access

    Posted Nov 02, 2022 12:11 PM
    Hi Dustin, I seem to bet to a point where the device gets registered and the account verified, after selecting Continue it says signing into network with securelogin.hpe.com in the URL field, then 'This site can't be reached' ? for testing purposes the fw access rules allow all, I'm doing/missing something, but not sure what yet !!?
    Thanks
    Dave


  • 7.  RE: Guest Portal registration / access

    Posted Nov 02, 2022 01:00 PM
    Hi Dustin, I noticed that I couldn't get it (securelogin.hpe.com) from an nslookup against google either ?
    Thanks
    Dave


  • 8.  RE: Guest Portal registration / access

    MVP GURU
    Posted Nov 02, 2022 03:44 PM
    That is the web login location for the clients against the APs. The securelogin address is local to the APs.

    ------------------------------
    Dustin Burns

    Lead Mobility Engineer @Worldcom Exchange, Inc.

    ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022
    If my post was useful accept solution and/or give kudos
    ------------------------------



  • 9.  RE: Guest Portal registration / access

    MVP GURU
    Posted Nov 02, 2022 03:44 PM
    Are you allowing dns for your guest roles?

    ------------------------------
    Dustin Burns

    Lead Mobility Engineer @Worldcom Exchange, Inc.

    ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022
    If my post was useful accept solution and/or give kudos
    ------------------------------



  • 10.  RE: Guest Portal registration / access

    Posted Nov 03, 2022 07:38 AM
    Hi Dustin, yes, dns is allowed on our 'Guest-Vlan' I notice unde Access- Roles there is mention of Captive-Portal being a role ?


  • 11.  RE: Guest Portal registration / access

    Posted Nov 03, 2022 09:47 AM
    Hi Dustin, sorry to pester again! still struggling with authentication on Guest, just a quick question, I now see a message under Guest Access- Visitors, the message...     The cloud guest networks are not available    ...  I've not seen this before and have been able to see my email address in the Account List ?


  • 12.  RE: Guest Portal registration / access

    MVP GURU
    Posted Nov 04, 2022 10:58 AM
    I would open a TAC case on that one.

    ------------------------------
    Dustin Burns

    Lead Mobility Engineer @Worldcom Exchange, Inc.

    ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022
    If my post was useful accept solution and/or give kudos
    ------------------------------