Controllerless Networks

 View Only
last person joined: 2 days ago 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Back to discussions
Expand all | Collapse all

Guest SSID Isue on IAP Cluster

This thread has been viewed 17 times

  • 1.  Guest SSID Isue on IAP Cluster

    Posted Dec 05, 2022 12:43 PM
    hi,

    i have clearpass in my environment working as radius and the tac engineer has configured the guest profile on clear pass and given the following to be configured on IAP cluster :
    Guest_preauth
    Guest_postauth
    https://10.102.64.209/guest/huber_guest.php

    on virtual cluster where to configure the same, as the captive portal is not coming up from the clearpass


  • 2.  RE: Guest SSID Isue on IAP Cluster

    EMPLOYEE
    Posted Dec 05, 2022 04:40 PM
    you can refer to this video
    https://www.youtube.com/watch?v=u6hyEtqzGOA


    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------

    Original Message


  • 3.  RE: Guest SSID Isue on IAP Cluster

    Posted Dec 06, 2022 04:54 AM
    Hi Shivam,
    as a test, try to hit the CP URL from a wired device on the same VLAN as your guest user gets put on.
    Also, I'm assuming that the WiFi device connected  to the SSID gets the pre-auth role and the correct IP information.
    Regards,
     Ewan.
    Original Message


  • 4.  RE: Guest SSID Isue on IAP Cluster

    EMPLOYEE
    Posted Dec 06, 2022 07:18 AM
    Replace the https://ip-address to the FQDN of the HTTPS certificate that you installed on ClearPass.

    https:// to an ip address will trigger a certificate warning by definition as you can't get a certificate on a private IP address, and most clients will just refuse to redirect.

    If you don't have an HTTPS certificate on ClearPass, make sure you get one, as well one for your Instant APs (unless these are under Central management in which case you can install the aruba_default cert and use that as public trusted certificate for Instant).

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


  • 5.  RE: Guest SSID Isue on IAP Cluster

    Posted Dec 06, 2022 07:32 AM

    Just to back-up what Herman says, the Guest cert needs to be publicly signed.

    You can use a wildcard.  Ie *.MyCompany.com



    This email and any attachments it may contain are confidential and solely intended for the use of the named addressee(s) only. Any views or opinions presented are solely those of the author and do not necessarily represent those of Qolcom. If you are not the intended recipient, be advised that you have received this email in error and that you should not rely on it or take any action based on it. You should not publish, use, disseminate, print, forward or copy this email as it is strictly prohibited. Please contact the sender if you have received this email in error and destroy it.



    Original Message