topic RE: Guest Splash with Redirect in ExtremeWireless (Identifi)

Guest Splash with Redirect

Alexandr_P — Tue, 04 Oct 2016 16:50:00 GMT

Hello, all!

There is a lot of information about how to configure Guest Splash.
Have 2 questions:
1. Is for now correct comment about "!!! Http only, per default https is not allowed !!!"?
2. How to configure - client connect, sees Login page, push "Accept" button AND REDIRECT TO SOME SPECIFIC URL, like "http://extremenetworks.com"?

Thank you!

RE: Guest Splash with Redirect

Joseph_Burnswor — Tue, 04 Oct 2016 19:18:00 GMT

Are you using NAC or a standalone controller?

RE: Guest Splash with Redirect

Alexandr_P — Tue, 04 Oct 2016 19:19:00 GMT

Hello, Joseph!

It's standalone controller.

Thank you!

RE: Guest Splash with Redirect

Joseph_Burnswor — Tue, 04 Oct 2016 20:38:00 GMT

ok, After creating your Guest VNS through the VNS Wizard, GO to WLAN Services and select your newly created Guest VNS.

The go to tab Auth & Acct

Change the drop down box from "Guest Portal" to "Guest Splash"

Then Click Configure

Then click "Launch Captive Portal Editor"
Create your Splash and Message

Click Save and Close

Then click close on the next window

Then Click save in the last window

Your Splash can look however you want to configure it, This one is just for this demo for you

If you have any other questions or run into an issue, please do not hesitate to let us know and we will get you where you want to be

RE: Guest Splash with Redirect

Alexandr_P — Wed, 05 Oct 2016 14:49:00 GMT

Hello!

All work fine.
EXCEPT
When try to open first page as Google or Wikipedia, which uses HSTS protocol - Guest Splash redirect doesn't work.
Is there any solution?

In this post no any solutions - https://gtacknowledge.extremenetworks.com/articles/Solution/HTTPS-Redirect-to-Captive-Portal-Not-Wor...

Soft v10

Thank you!

RE: Guest Splash with Redirect

Alexandr_P — Wed, 05 Oct 2016 15:17:00 GMT

Also question - why don't work "Use HTTPS for User Connections"?

Thank you!

RE: Guest Splash with Redirect

Joseph_Burnswor — Wed, 05 Oct 2016 23:14:00 GMT

The issue with HTTPS is that there is not a "Real" certificate on the interface. You can do this if you do the Guest Splash redirect via hostname and add a certificate for it.

Also, in order to do the HTTPS redirect with a cert error, you have to add the rule in your Role

dest src 0.0.0.0/0 TCP 53 allow

Normally DNS is UDP, but in order to do the highjack, you have to tell it to accept the TCP as well

RE: Guest Splash with Redirect

Craig_Guilmette — Thu, 06 Oct 2016 00:02:00 GMT

Hello Alexandr

Our solution does allow a redirect from a page such as https://google.com and depending on the version of your web browser you can test that. Some browsers warn that you are being redirected and if you click OK it will work and other browsers will not allow the redirect at all. We put the work around in our solution like asked but the new versions of the browsers of the world decided they were not going to allow it. I standard answer is set your home page to a non-https page for 100% reliability.

RE: Guest Splash with Redirect

Alexandr_P — Thu, 06 Oct 2016 10:49:00 GMT

Thank you all for answers!!!