topic Captive portal for UPA is not working in Aerohive Migrated Content

Captive portal for UPA is not working

nocdl — Wed, 10 Jul 2019 02:44:01 GMT

Hello,

I'm deploying a new SSID with PPSK as SSID authentication and I've enabled captive portal to show User policy Acceptance page but that page is never showed after user login and therefor users get access to internet without accepting the UPA.

I'm deploying the SSID from HiveManager NG, I've checked firewall policy and it allows all input and output traffic.

Thanks.

Re: Captive portal for UPA is not working

samantha_lynn — Wed, 10 Jul 2019 20:16:56 GMT

Are users able to browse once they are connected? Typically if we don't see the CWP pop up right away, we will see it when we open a browser. If the browser doesn't bring the CWP up, but the clients aren't able to reach the internet, try navigating to 1.1.1.1 to see if that will pull up the CWP. Please let me know the results of these tests.

Re: Captive portal for UPA is not working

nocdl — Thu, 11 Jul 2019 01:17:16 GMT

Hell,

once connected and logged into the wireless users can navigate without accepting UPA and CWP doesn't bring up, portal doesn't appear when I navigate to 1.1.1.1 either.

Thanks.

Re: Captive portal for UPA is not working

samantha_lynn — Thu, 11 Jul 2019 02:01:44 GMT

That sounds more like the configuration isn't making it to the AP properly, could you send tech data from an AP to communityhelp@aerohive.com? I can take a look at the running configuration and a few other things to see if I can narrow down the issue here.

Re: Captive portal for UPA is not working

nocdl — Thu, 11 Jul 2019 02:13:46 GMT

Hello,

I just sent the tech data to communityhelp@aerohive.com

Thanks.

Re: Captive portal for UPA is not working

samantha_lynn — Thu, 11 Jul 2019 19:37:29 GMT

Thank you for sending that data over, I'm seeing the CWP configuration in the running configuration, which is good news. I'm also seeing successful CWP pass messages in the buffered log: 2019-07-10 18:29:25 debug ah_auth: [auth_info]: CWP passed, MDM passed or disabled, notify FE Completed(4) <clientmacredacted>. Is it possible these users passed the CWP recently and could still be in the CWP cache? If that doesn't seem likely, I would recommend opening a case to investigate the false CWP passes we're seeing.