topic Re: DHCP in captive portal in ExtremeCloud IQ Controller

DHCP in captive portal

david_c98 — Sun, 30 May 2021 03:07:54 GMT

I have configured a portal on an XCC controller, this portal must authenticate 4 different user roles to a certain SSID
-students
-masters
-workers
-guests
Each of these roles has a specific vlan and a specific network segment.
Then when a user authenticates with her credential, for example a student, he will have to be given an ip 172.19.x.x
and when it is to a master an ip 172.20.x.x and so on with each user depending on the role.
What I have noticed is that the addressing is provided by the role and not the vlan, so how would it be the correct way to link several vlan to a role so that the correct addressing per user is achieved.

P.S. I also have this implementation in a Controller identify, but I don't know if this can also be implemented in XCC.

Re: DHCP in captive portal

StephanH — Sun, 30 May 2021 04:15:05 GMT

Hello David,

decisive is the role/accept policy that a user receives after autentication.

Look to the deployment guide here https://documentation.extremenetworks.com/Extreme%20Campus%20Controller/v5.26/Extreme%20Campus%20Controller_v5.26.03_Deployment_Guide.pdf?_ga=2.131799500.233147296.1622311227-1425918141.1599702386&_gac=1.121642105.1621106377.Cj0KCQjw4v2EBhCtARIsACan3nzfXLxhzvR83a1Cb0hK7-Bnq5e-o38oZMa8jVsdddOu1KU9s1LtC4AaAq43EALw_wcB to see all details (Starding on page 51 )

Re: DHCP in captive portal

david_c98 — Mon, 31 May 2021 23:41:43 GMT

Hello StephanH,

I already reviewed the manual and configured the roles, but I still have no result, what I have noticed that in the part of Network >> WLANs >> my SSID in Default Auth Role, if I modify this with the vlan of each User it solves the addressing.
For example, if in Default Auth Role I configure it with the student vlan and it gives me the ip 172.19.x.x
and if I change it to masters it gives me an ip 172.20.x.x
Is there a way that the Default Auth Role has a group of vlans?

Re: DHCP in captive portal

StephanH — Tue, 01 Jun 2021 00:44:43 GMT

Hello David,

Have you checked if the clients get different roles? The role that also fits to the VLAN?
The easiest way to do this is under "Monitor->Clients".

Re: DHCP in captive portal

david_c98 — Tue, 01 Jun 2021 00:47:19 GMT

Yes. Each Role has a specific Vlan students the 3, workers 96, guests 147.

Re: DHCP in captive portal

StephanH — Tue, 01 Jun 2021 13:34:49 GMT

Hello David,

To be sure. You see that ever client receive the correct role in monitor?

Re: DHCP in captive portal

david_c98 — Tue, 01 Jun 2021 22:35:40 GMT

Yes, individual tests per role have already been done and exactly everything is correct, it assigns the correct addressing to the corresponding vlan.
The problem you have is how you can implement all these roles within a single portal, and in the same way give me their address and corresponding vlan.