Guest Splash with Redirect

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
Hello, all!

There is a lot of information about how to configure Guest Splash.
Have 2 questions:
1. Is for now correct comment about "!!! Http only, per default https is not allowed !!!"?
2. How to configure - client connect, sees Login page, push "Accept" button AND REDIRECT TO SOME SPECIFIC URL, like "http://extremenetworks.com"?

Thank you!
Photo of Alexandr P

Alexandr P, Embassador

  • 12,596 Points 10k badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of Joseph Burnsworth

Joseph Burnsworth

  • 2,328 Points 2k badge 2x thumb
Are you using NAC or a standalone controller?
Photo of Alexandr P

Alexandr P, Embassador

  • 12,596 Points 10k badge 2x thumb
Hello, Joseph!

It's standalone controller.

Thank you!
Photo of Joseph Burnsworth

Joseph Burnsworth

  • 2,328 Points 2k badge 2x thumb
ok, After creating your Guest VNS through the VNS Wizard, GO to WLAN Services and select your newly created Guest VNS.

The go to tab Auth & Acct

Change the drop down box from "Guest Portal" to "Guest Splash"

Then Click Configure

Here is where you can uncheck the HTTPS box and select your redirect URL


Then click "Launch Captive Portal Editor"
 Create your Splash and Message



Click Save and Close

Then click close on the next window

Then Click save in the last window

Your Splash can look however you want to configure it, This one is just for this demo for you


If you have any other questions or run into an issue, please do not hesitate to let us know and we will get you where you want to be
Photo of Alexandr P

Alexandr P, Embassador

  • 12,596 Points 10k badge 2x thumb
Hello!

All work fine.
EXCEPT
When try to open first page as Google or Wikipedia, which uses HSTS protocol - Guest Splash redirect doesn't work.
Is there any solution?

In this post no any solutions - https://gtacknowledge.extremenetworks.com/articles/Solution/HTTPS-Redirect-to-Captive-Portal-Not-Wor...

Soft v10

Thank you!
Photo of Alexandr P

Alexandr P, Embassador

  • 12,596 Points 10k badge 2x thumb
Also question - why don't work "Use HTTPS for User Connections"?

Thank you!
Photo of Joseph Burnsworth

Joseph Burnsworth

  • 2,328 Points 2k badge 2x thumb
The issue with HTTPS is that there is not a "Real" certificate on the interface. You can do this if you do the Guest Splash redirect via hostname and add a certificate for it.

Also, in order to do the HTTPS redirect with a cert error, you have to add the rule in your Role

dest src 0.0.0.0/0 TCP 53 allow

Normally DNS is UDP, but in order to do the highjack, you have to tell it to accept the TCP as well
(Edited)
Photo of Craig Guilmette

Craig Guilmette, Employee

  • 2,670 Points 2k badge 2x thumb
Hello Alexandr

Our solution does allow a redirect from a page such as https://google.com and depending on the version of your web browser you can test that. Some browsers warn that you are being redirected and if you click OK it will work and other browsers will not allow the redirect at all. We put the work around in our solution like asked but the new versions of the browsers of the world decided they were not going to allow it. I standard answer is set your home page to a non-https page for 100% reliability. 
Photo of Alexandr P

Alexandr P, Embassador

  • 12,596 Points 10k badge 2x thumb
Thank you all for answers!!!