CAPTIVE PORTAL IN WS-C35

  • 0
  • 1
  • Question
  • Updated 1 year ago
  • Answered
Hi all,
I creat a Guest Portal Services with guide:  https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-create-a-Guest-Portal-Service

Network diagram:



Step1: Creat a topology:

Step 2: Creat Role

- Non Authentication Role:

- Authentication Roles:


Step 3: Creat a WLAN Services



Step 4: Creat VNS



Problem: After config. I test by my laptop. My laptop has IP Address. But When I open a web browser and put in any valid webpage address, I can't  redirect to the captive portal webpage of  the controller.

 

Please, help me!!
Thanks so much.
Photo of Long Tran

Long Tran

  • 696 Points 500 badge 2x thumb

Posted 1 year ago

  • 0
  • 1
Photo of Peter Kulmbrein

Peter Kulmbrein

  • 1,178 Points 1k badge 2x thumb
Hi,

most important is that you can reach the DNS from the Network. Did you test if you can reach it from the controller?
br
Peter
Photo of Nathiya Munuswamy

Nathiya Munuswamy, Employee

  • 1,706 Points 1k badge 2x thumb
Hi,

The guest portal configuration is correct. Please check for the DNS resolution from client side(cmd -> nslookup). The DNS resolution should be working fine for the captive portal redirection. 



Regards,
Nathiya M
(Edited)
Photo of Jacob, Praveen

Jacob, Praveen, Employee

  • 1,022 Points 1k badge 2x thumb
Do you get a login page when you type in the IP address of the Controller on your browser?
Photo of Long Tran

Long Tran

  • 696 Points 500 badge 2x thumb
Do you get a login page when you type in the IP address of the Controller on your browser?--> No, Captive portal does not appear.
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 50,154 Points 50k badge 2x thumb
Let's do it step by step.....

1) Make sure that the basic network access is working - bypass the CP
in GUI > VNS > Virtual Network > GUEST
set non-authenticated and authenticated to Guest_Captive_authen
Q: could you access the internet with the wireless client

2) DNS
change the value back in 1)
open a DOS window on the client and ping extreme.networks.com
Q: does the name resultion work = do you see the 104.154.197.154 address

Example:



3) open a browser and go to 10.10.10.10
Q: are you redirected to the portal

4) add another rule to the non-auth role
I can't remember the exact issue but it was necessary to also allow ARP
You'd try whether that helps, add the 0x806 rule....



Cheers,
Ron
Photo of Long Tran

Long Tran

  • 696 Points 500 badge 2x thumb
Hi Ronald Dvorak, Thanks for help.
1, Make sure that the basic network access is working - bypass the CP
in GUI > VNS > Virtual Network > GUEST. set non-authenticated and authenticated to Guest_Captive_authen --> I can Access Internet
2,
 

3,  open a browser and go to 10.10.10.10 --> I can't redirect to the portal
4, ... Remember please
Thanks.
Photo of Ronald Dvorak

Ronald Dvorak, Embassador

  • 50,154 Points 50k badge 2x thumb
Please check whether "Use HTTPS for User Connections:" is disabled = remove the checkmark in 

GUI > VNS > WLAN services > Guest_Captive > Auth&Acct > Configure > 
Photo of Long Tran

Long Tran

  • 696 Points 500 badge 2x thumb


I disable "Use HTTPS". But I can't redirect captive portal.
Photo of Bill Handler

Bill Handler

  • 1,414 Points 1k badge 2x thumb

When you connect, what role are you getting - Reports>Clients>

Photo of Steve Ballantyne

Steve Ballantyne

  • 5,806 Points 5k badge 2x thumb
There is an option under VNS > Global for "Client Autologin". It's not the best name for this feature! But this is what controls weather the client is automatically sent to the logon page when they join the network.



I don't think this is your issue. Because the page would still load when you try to go to some other site (like Google).

VNS > WLAN > *click on your WLAN* > Auth & Acct tab - click the Configure button. What does your Guest Portal look like? Can you post some screenshots? You might try changing this to Guest Splash for testing. I think most people choose Guest Splash because it's easy to set up. You would do Guest Portal if you need to use some sort of username, password, key, etc. But if you just need for them to agree to some rules, use Guest Splash.

Also - I would consider using a larger IP scope for your guest network. Or shorten your DHCP lease time. Depending on the number of people you have passing by, it doesn't take long to loan out all of your IP's, and then nobody can connect until those leases start expiring.
Photo of Jason

Jason, Employee

  • 3,608 Points 3k badge 2x thumb
Hello Long, 

There is a rule based redirection setting in newer releases, starting in 10.11,  that will prevent the client getting a portal page. Please see this Knowledge Article and check if the "rule based redirection" setting is enabled. 
https://gtacknowledge.extremenetworks.com/articles/Q_A/Why-the-redirection-to-portal-page-failed-for...

Regards, 
Jason
Photo of Long Tran

Long Tran

  • 696 Points 500 badge 2x thumb
Thanks Jason,
Good guide! I configured to success Captive Portal.
Thank you very much.
Photo of Jason

Jason, Employee

  • 3,608 Points 3k badge 2x thumb
You're welcome Long, thanks for letting us know!