topic Re: Captive portal redirection does not work in Extreme Cloud

Captive portal redirection does not work

Georg — Thu, 18 Jun 2020 16:48:53 GMT

I have the problem that unauthenticated clients are not automatically redirected to the internal captive portal page of the XCA, but they can access the page when they type in the IP address of the XCA.

I already tried this with many different clients.

What can be the cause of this problem?

In the Identify world there were several options to trigger the automatic redirection, but on the XCA i have no clue what is required to let this work.

The Setup is:

VE6120 Small

Version 04.76.04.0005

AP310i Access-Points

Re: Captive portal redirection does not work

Ronald_Dvorak — Thu, 18 Jun 2020 16:53:44 GMT

Hi Goerg,

could it be that the unauthenticated role/filter is not correct and that is the reason you don’t get a redirect.

Could you post a screenshot of the role/rules.

-Ron

Re: Captive portal redirection does not work

Georg — Thu, 18 Jun 2020 17:00:04 GMT

Hi Ronald,

thank you for your fast reply.

Here is a screenshot of the unauthenticated rule:

Re: Captive portal redirection does not work

SantM — Thu, 18 Jun 2020 17:17:47 GMT

Hi Georg,

I am using Guest Portal with Guest Registration on 4.76.01 for unauthenticated users and it is working fine. Authentication Portal is disabled.

Have you also checked the rules that are automatically created for Captive Portal you have chosen?

If you want to see the rules on implementation, let me know.

BR,

Santosh

Re: Captive portal redirection does not work

Georg — Thu, 18 Jun 2020 17:24:12 GMT

Hi Santosh,

which automatically created rules do you mean?

Yes i would like to see this rules.

At Identify you had to configure everything by your own, the XCA feels like a black box, and i dont know what is happening.

Here is my WLAN configuration:

Re: Captive portal redirection does not work

SantM — Thu, 18 Jun 2020 17:40:25 GMT

Hi George,

XCA creates rules when we configure Captive Portal.

Please check snaps from my implementation.

These rules are located under Omboarding.

I doubt on default auth roles and and default vlan on your WLAN configuration. Roles in the Rules use default vlan defined in the Network Configuration.

BR;

Santosh

Re: Captive portal redirection does not work

Georg — Thu, 18 Jun 2020 17:48:07 GMT

Hi Santosh,

I didnt touch these rules under onboard.

here are my screenshots:

The idea on this SSID is to pre-register Guest users to be able to print tickets.

Re: Captive portal redirection does not work

SantM — Thu, 18 Jun 2020 17:48:51 GMT

Hi Goerg,

If the problem is not resolved, can you provide a snapshot of your Captive Portal configuraiton.

I will give a try in my lab.

BR;

Santosh

Re: Captive portal redirection does not work

SantM — Thu, 18 Jun 2020 17:50:29 GMT

Ok. I got the snapshot I wanted. Let me try.

Re: Captive portal redirection does not work

Georg — Thu, 18 Jun 2020 17:51:45 GMT

Hi Santosh,

Unfortunately the problem is not resolved and im troubleshooting this for days now 😞

Thank you very much!

Re: Captive portal redirection does not work

Georg — Thu, 18 Jun 2020 18:01:23 GMT

Some sidenotes:

- The clients dont change their topology after successful authentication, so they are in the network, where they would have internet access if they werent be restricted by the unauth role.

- The clients get a DHCP-address of the XCA, which is on the same subnet as the clients.

- The DNS-server is set to 8.8.8.8

- The XCA has internet connection and is able to reach public NTP servers

- There are already pre-registered accounts at the xca, and if i manually go to the portal page, i am able to successfully login with one of these pre-registered accounts

- I have already tried to use HTTP instead of HTTPS to check if its a certificate problem, without success

Re: Captive portal redirection does not work

SantM — Thu, 18 Jun 2020 18:41:10 GMT

Hi Georg,

I did a quick test in my lab. See the config below.

It worked for me.

Make sure that you want to use vlan 1 as default vlan in your case.

BR,

Santosh

Re: Captive portal redirection does not work

Georg — Thu, 18 Jun 2020 18:45:30 GMT

Thank you so much Santosh for spending time on this.

So besides you are using a different vlan as default vlan, its the same config.

What software version and what kind of controller do you use?

Re: Captive portal redirection does not work

SantM — Thu, 18 Jun 2020 18:51:50 GMT

I have VE6120 small, 4.76.01.

I did testing on different clients and got the different results.

On my mobile, it works fine after ignoring certificate issue.

On my lab PC, redirection works, but shows certificate issue.

On my work PC; redirection doesn’t work at all, but works manually on browser. I see the same issue that you are experiencing on my work PC.

Re: Captive portal redirection does not work

SantM — Thu, 18 Jun 2020 18:56:37 GMT

Redirection on my work PC was hindered by LAN connection. Redirection worked after removing LAN cable. 🙂 It was interesting.

To summarize, Captive Portal that you are trying, works for me.

Re: Captive portal redirection does not work

Georg — Thu, 18 Jun 2020 19:27:26 GMT

Thank you Santosh. I tried some other things without success.

Still no idea, whats the cause of this issue 😞

Re: Captive portal redirection does not work

SantM — Thu, 18 Jun 2020 20:50:23 GMT

I will upgrade the XCA later in the day to version you have and let’s see if it still works for me.

You can try deleting all rules defined for CP and corresponding network or try with new network and CP.

I remember that radius authentication was not working for a customer due to rule issue. Rule was fine but not working. I deleted the rule and created exactly same rule and it started working. It was odd.

By the way, have you also tried with different vlan and roles? For simplicity, same vlan as XCA.

Since you are telling that you can manually get CP, for me it seems to be rule issue.

Re: Captive portal redirection does not work

Georg — Thu, 18 Jun 2020 20:55:07 GMT

Yes i have tried many different rules and vlans and also tried to delete the whole wlan configuration and configure it from the start again.

Re: Captive portal redirection does not work

Georg — Thu, 18 Jun 2020 20:56:02 GMT

A rule issue seems to be the most plausible explaination for this behavior as well.

Re: Captive portal redirection does not work

Christoph_S — Thu, 18 Jun 2020 23:23:28 GMT

In the Default Auth Role vlan-201-role what’s configured for DNS access?