L7 ROLE versio 10.21.01

[Luis_Mendes]

I using L7 roles to authenticate. I created a portal (external portal) to authenticate using GMAIL, WINDOWS (OUTLOOK), OR FACEBOOK login to authenticate.

Create rules L7 with these networks and only facebook not work. The customer authenticate with anothers networks.

I need create L7 rules with permit FACEBOOK, GMAIL. But only gmail Works. Any idea, i use ap 3705 and version 10.21.01

[Ronald_Dvorak]

I've done ECP only with NAC but I think it's the same principle for internal/external which is you get only redirected to the portal if a deny rule is hit in the the unauthenticate role.

As a example take a look right here...
https://community.extremenetworks.com/extreme/topics/how-to-identifi-wireless-appliances-guest-porta...

If I unterstand that correctly that would mean that you'd need to deny mail, facebook so that clients get redirected to the portal if they use mail, facebook - right ?! *confused*

[Alexandr_P]

Hello, Luis!

What solution you use for external portal to authenticate using GMAIL, WINDOWS (OUTLOOK), OR FACEBOOK login to authenticate?

Can you share your solution?
It's just interesting you experience.

Thank you!

[Ronald_Dvorak]

Works for me - bridge@EWC, V10.21.02, AP3705i, in my case I've blocked traffic as that was easier to test.

Note: it took some minutes before the traffic was blocked so I'm not sure whether I've done something wrong or whether there is some sync happening until it's active.

Have you enabled application visibility on the WLAN service ?

Back to the overall goal...I'm not sure whether I unterstand the setup..
the WLAN service is set to authentication for external captive portal and the screenshot show the unauthenticated traffic role ?
And then in case someone uses facebook, mail it should redirect to the portal and the user needs to authenticate on the portal ?

[Luis_Mendes]

Yes, application visibility is enable.
The screenshot show unauthenticated traffic.
Yes, mail, or google redirect because this traffic pass...
On facebook customer will be review the config of facebook portal and i will update you...