ExtremeWireless (Identifi)

Expand all | Collapse all

CAPTIVE PORTAL IN WS-C35

  • 1.  CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 01:35

    Hi all,
    I creat a Guest Portal Services with guide: https://extremeportal.force.com/ExtrArticleDetail?an=000082158


    Network diagram:

    RackMultipart20170825-14724-1at32xf-toppall_inline.png

     


    Step1: Creat a topology:

     

     

    RackMultipart20170825-70578-1krk4c0-topo_2_inline.png


    Step 2: Creat Role

    - Non Authentication Role:

     

     

    RackMultipart20170825-130533-1kz9ast-non_authen_2_inline.png


    - Authentication Roles:

     

     

    RackMultipart20170825-99344-xiqejn-authen_2_inline.png

     


    Step 3: Creat a WLAN Services

     

     

    RackMultipart20170825-16939-1cd2lx8-WLAN_Service_1_inline.png

     

     

    RackMultipart20170825-120486-1jkyvm-WLAn_Service_4_inline.png

     


    Step 4: Creat VNS

     

     

    RackMultipart20170825-70578-11qc8em-VNS_guest_inline.png

     


    Problem: After config. I test by my laptop. My laptop has IP Address. But When I open a web browser and put in any valid webpage address, I can't redirect to the captive portal webpage of the controller.

     

     

     

    RackMultipart20170825-64342-134ppvv-laptop_inline.png

     


    Please, help me!!
    Thanks so much.

     

     

     

     



  • 2.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 03:56
    Hi, most important is that you can reach the DNS from the Network. Did you test if you can reach it from the controller? br Peter


  • 3.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 04:27
    Hi,

    The guest portal configuration is correct. Please check for the DNS resolution from client side(cmd -> nslookup). The DNS resolution should be working fine for the captive portal redirection.

    Regards,
    Nathiya M


  • 4.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 04:39
    Do you get a login page when you type in the IP address of the Controller on your browser?


  • 5.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 05:34
    Let's do it step by step.....

    1) Make sure that the basic network access is working - bypass the CP
    in GUI > VNS > Virtual Network > GUEST
    set non-authenticated and authenticated to Guest_Captive_authen
    Q: could you access the internet with the wireless client

    2) DNS
    change the value back in 1)
    open a DOS window on the client and ping extreme.networks.com
    Q: does the name resultion work = do you see the 104.154.197.154 address

    Example:



    3) open a browser and go to 10.10.10.10
    Q: are you redirected to the portal

    4) add another rule to the non-auth role
    I can't remember the exact issue but it was necessary to also allow ARP
    You'd try whether that helps, add the 0x806 rule....



    Cheers,
    Ron


  • 6.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 07:34
    Please check whether "Use HTTPS for User Connections:" is disabled = remove the checkmark in

    GUI > VNS > WLAN services > Guest_Captive > Auth&Acct > Configure >


  • 7.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 09:26
    When you connect, what role are you getting - Reports>Clients>



  • 8.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 09:40
    There is an option under VNS > Global for "Client Autologin". It's not the best name for this feature! But this is what controls weather the client is automatically sent to the logon page when they join the network.



    I don't think this is your issue. Because the page would still load when you try to go to some other site (like Google).

    VNS > WLAN > *click on your WLAN* > Auth & Acct tab - click the Configure button. What does your Guest Portal look like? Can you post some screenshots? You might try changing this to Guest Splash for testing. I think most people choose Guest Splash because it's easy to set up. You would do Guest Portal if you need to use some sort of username, password, key, etc. But if you just need for them to agree to some rules, use Guest Splash.

    Also - I would consider using a larger IP scope for your guest network. Or shorten your DHCP lease time. Depending on the number of people you have passing by, it doesn't take long to loan out all of your IP's, and then nobody can connect until those leases start expiring.



  • 9.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 11:48

    Hello Long,

    There is a rule based redirection setting in newer releases, starting in 10.11, that will prevent the client getting a portal page. Please see this Knowledge Article and check if the "rule based redirection" setting is enabled.
    https://extremeportal.force.com/ExtrArticleDetail?an=000087892

    Regards,
    Jason



  • 10.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 04:39
    Do you get a login page when you type in the IP address of the Controller on your browser?--> No, Captive portal does not appear.


  • 11.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 05:34
    Hi Ronald Dvorak, Thanks for help.
    1, Make sure that the basic network access is working - bypass the CP
    in GUI > VNS > Virtual Network > GUEST. set non-authenticated and authenticated to Guest_Captive_authen --> I can Access Internet
    2,



    3, open a browser and go to 10.10.10.10 --> I can't redirect to the portal
    4, ... Remember please
    Thanks.


  • 12.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 07:34



    I disable "Use HTTPS". But I can't redirect captive portal.


  • 13.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 11:48

    Thanks Jason,
    Good guide! I configured to success Captive Portal.
    Thank you very much.



  • 14.  RE: CAPTIVE PORTAL IN WS-C35

    Posted 08-25-2017 11:48

    You're welcome Long, thanks for letting us know!