07-15-2019 09:50 PM
Captive Web Portal with Return Aerohive Private PSK, sets Default User Profile to "default-profile".
However, "default-profile" has no firewall policies, allowing users to directly connect to the network.
Is it possible to configure a different User Profile, so we can apply the default firewall policy "Redirect-Only"?
This is possible with all other CWP options, but is overwritten when PPSK is selected.
Solved! Go to Solution.
07-16-2019 11:11 AM
Ah yes I see exactly what you mean now, I was looking on the PPSK rather than the Registration SSID, I see the same on the Cloud version of HiveManager.
I'm not sure as to why these options become unavailable so I'll leave that for Aerohive...
The only thing I can think of that may help is that if it is using the default user profile from the PPSK SSID, are you able to change this to a specific VLAN, security policies etc, and then apply a different profile for users when they actually receive a PPSK such as this?:
07-16-2019 11:15 AM
Unfortunately, not.
"This is a default object and cannot be modified."
07-16-2019 11:11 AM
Ah yes I see exactly what you mean now, I was looking on the PPSK rather than the Registration SSID, I see the same on the Cloud version of HiveManager.
I'm not sure as to why these options become unavailable so I'll leave that for Aerohive...
The only thing I can think of that may help is that if it is using the default user profile from the PPSK SSID, are you able to change this to a specific VLAN, security policies etc, and then apply a different profile for users when they actually receive a PPSK such as this?:
07-16-2019 11:11 AM
Hello Ashley, and thanks for coming back to me.
I have followed this guide, but it doesn't answer the problem.
The issue can be notices on the User profiles sections, as being used by the self-registration SSID:
Actually, it goes away, the minute I select CWP
Before Selecting "Return Aerohive Private PSK:
.. and after selecting Return PPSK, the option to select user profile is gone:
In reality, users end up on the PPSK SSID user profile and not the default, as i can see they are getting an IP address on the subnet of the PPSK SSID.
Even worse, without being able to have a specific User Profile and VLAN for the Open SSID, I cannot enforce any security policies and the users, can actually access anything apart from HTTP/HTTPS, as for example they can establish a VPN...
we are on 19.5.1.7-NGVA
07-16-2019 10:42 AM
Hello George,
Yes this should be possible. I can't quite work out where you're seeing the user profile overwritten when the PPSK option is selected however. For instance I have an Open SSID for self reg, then a PPSK SSID with different user profiles associated with it.
This guide may help: https://thehivecommunity.aerohive.com/s/article/Self-Registration-PPSK-SSID-in-Hivemanager