What is the URL to submit the RADIUS username and password?

  • 0
  • 1
  • Question
  • Updated 4 months ago
  • Answered
We have a 7502 AP running on a controller and we need to know what is the URL where to submit the RADIUS username and password.
Someone knows something about that?

This is our html:

We know the structure of the form, but we don't know what would be the $url parameter. We tried using http://1.1.1.1:880/cgi-bin/hslogin.cgi but it does not worked.

$url = '';
$hsServer = 'http://portal.rc.zooxwifi.com/acesso';

<html>
    <body>
        <form method=POST name="frmLogin" action="$url">
            <input type="hidden" name="success_url" value="http://google.com"; />
            <input type="hidden" name="f_user" value="RADIUS_USER" />
            <input type="hidden" name="f_pass" value="RADIUS_PASS" />
            <input type="hidden" name="f_hs_server" value="$hsServer" />
            <input type="hidden" name="f_Qv" value="$qv" />
        </form>
    </body>
<script>
document.frmLogin.submit();    
</script>
</html>


Thanks!
Photo of Cristiano Sarmento

Cristiano Sarmento

  • 122 Points 100 badge 2x thumb

Posted 4 months ago

  • 0
  • 1
Photo of Andy Holden

Andy Holden, Employee

  • 1,092 Points 1k badge 2x thumb

The WING captive portal is set to redirect the first request from a browser to the Captvel Portal service. This could be the TERMS AND CONDITION page or it could be, as in your request, the LOGIN page.


Captive Portals can be configured to be hosted on a LOCAL DEVICE, Controller or Centralized Controller (used for Clustered Configurations). The Pages have options of how they can be supported.

1) The standard pages can be utilized. Just update the available fields.

The next two options will require you to utilize the Standard Screens as a template

2) The Advances feature allows you to upload your custom screens to replace the defauld screens

3)EXTERNALL HOSTED - This allows you to host the screens on an external server. Be sure you include the hosting server in the Captive Portals WHITE LIST

Photo of Cristiano Sarmento

Cristiano Sarmento

  • 122 Points 100 badge 2x thumb
My captive portal is externally hosted, at (http://portal.rc.zooxwifi.com/login). In this case, i'm doing the user login, by email or social network (facebook, instagram, etc) and the the access may be granted by the RADIUS server. To do that, usually with other hardwares like Ruckus, we submit the RADIUS user and password directly to the Access Point with a IP:PORT, like, http://10.1.0.1:3390/login?username=RADIUS_USER&password=RADIUS_PASSWORD.

Does the 7502 has some similar URL where we need to submit the RADIUS data?

The URL generated by the 7502 AP when a user tries to connect is (http://portal.rc.zooxwifi.com/acesso?hs_server=portal.rc.zooxwifi.com&Qv=it_qpmjdz=Dbqujwf.[ppy@bbb_qpmjdz=BBB.[ppy@dmjfou_njou=2417144::5@dmjfou_nbd=G1.E2.B:.:B.7D.B:@ttje=[ppy_Qspyjpo@bq_nbd=95.35.9E.E9.8G.5B)

We parse all these encoded parameters but any of them contains the Access Point IP and Port (like the other hardwares we tried) so we could submit the RADIUS data.

Thanks!
Photo of Andy Holden

Andy Holden, Employee

  • 1,092 Points 1k badge 2x thumb

Hi

It is extremely important that you use the Standard screens as a template for your remote screens.


How is the Captive Portal configured. This is different from where it gets the screens. If it is configured as INTERNAL/SELF, it means that the Captive Portal Services need to be defined on the AP. For the other two options, it Captive Portal service needs to be defined on the Controllers. Remember, you will need to configure a AAA policy and you may want to allow all radius queries to be proxied through the Controller.


One suggestion, follow the KISS principle for your initial testing. Use the Default Screen and just Radius Authentication first, then change one option at a time until you get what you want.