Guest Splash with Redirect


Userlevel 6
Hello, all!

There is a lot of information about how to configure Guest Splash.
Have 2 questions:
1. Is for now correct comment about "!!! Http only, per default https is not allowed !!!"?
2. How to configure - client connect, sees Login page, push "Accept" button AND REDIRECT TO SOME SPECIFIC URL, like "http://extremenetworks.com"?

Thank you!

8 replies

Userlevel 4
Are you using NAC or a standalone controller?
Userlevel 6
Hello, Joseph!

It's standalone controller.

Thank you!
Userlevel 4
ok, After creating your Guest VNS through the VNS Wizard, GO to WLAN Services and select your newly created Guest VNS.

The go to tab Auth & Acct

Change the drop down box from "Guest Portal" to "Guest Splash"


Then Click Configure



Then click "Launch Captive Portal Editor"
Create your Splash and Message



Click Save and Close

Then click close on the next window

Then Click save in the last window

Your Splash can look however you want to configure it, This one is just for this demo for you



If you have any other questions or run into an issue, please do not hesitate to let us know and we will get you where you want to be
Userlevel 6
Hello!

All work fine.
EXCEPT
When try to open first page as Google or Wikipedia, which uses HSTS protocol - Guest Splash redirect doesn't work.
Is there any solution?

In this post no any solutions - https://gtacknowledge.extremenetworks.com/articles/Solution/HTTPS-Redirect-to-Captive-Portal-Not-Wor...

Soft v10

Thank you!
Userlevel 6
Also question - why don't work "Use HTTPS for User Connections"?

Thank you!
Userlevel 4
The issue with HTTPS is that there is not a "Real" certificate on the interface. You can do this if you do the Guest Splash redirect via hostname and add a certificate for it.

Also, in order to do the HTTPS redirect with a cert error, you have to add the rule in your Role

dest src 0.0.0.0/0 TCP 53 allow

Normally DNS is UDP, but in order to do the highjack, you have to tell it to accept the TCP as well
Userlevel 5
Hello Alexandr

Our solution does allow a redirect from a page such as https://google.com and depending on the version of your web browser you can test that. Some browsers warn that you are being redirected and if you click OK it will work and other browsers will not allow the redirect at all. We put the work around in our solution like asked but the new versions of the browsers of the world decided they were not going to allow it. I standard answer is set your home page to a non-https page for 100% reliability.
Userlevel 6
Thank you all for answers!!!

Reply