126
| Captive Portal for Guest Access
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Configuring Internal Captive Portal for Guest Network
For internal captive portal authentication, an internal server is used for hosting the captive portal service. You
can configure internal captive portal authentication when adding or editing a guest network created for
wireless or wired profile through the Instant UI or the CLI.
In the Instant UI
1. Navigate to the WLAN wizard or Wired window.
l
To configure internal captive portal authentication for a WLAN SSID, on the
Network
tab, click
New
to
create a new network profile or
edit
to modify an existing profile.
l
To configure internal captive portal authentication for a wired profile, click
More > Wired
. In the
Wired
window, click
New
under
Wired Networks
to create a new network profile, or click
Edit
to select and
modify an existing profile.
2. Click the
Security
tab and assign values for the configuration parameters:
Parameter
Description
Splash page type
Select any of the following from the drop-down list.
l
Internal - Authenticated
—When
Internal Authenticated
is enabled,
the guest users are required to authenticate in the captive portal page to
access the Internet. The guest users who are required to authenticate
must already be added to the user database.
l
Internal - Acknowledged
—When
Internal Acknowledged
is enabled,
the guest users are required to accept the terms and conditions to
access the Internet.
MAC authentication
Select
Enabled
from the
Mac Authentication
drop-down list to enable MAC
authentication.
Delimiter character
Specify a character ( for example, colon or dash) as a delimiter for the MAC
address string. When configured, the IAP will use the delimiter in the MAC
authentication request. For example, if you specify colon as the delimiter,
MAC addresses in the xx:xx:xx:xx:xx:xx format are used. If the delimiter is not
specified, the MAC address in the xxxxxxxxxxxx format is used.
NOTE:
This option is available only when MAC authentication is enabled.
Uppercase support
Set to
Enabled
to allow the IAP to use uppercase letters in MAC address
string for MAC authentication.
NOTE:
This option is available only if MAC authentication is enabled.
WISPr
(Applicable for WLAN SSIDs only.)
Select
Enabled
if you want to enable WISPr authentication. For more
information on WISPr authentication, see
Configuring WISPr Authentication
NOTE:
The WISPr authentication is applicable only for Internal-
Authenticated splash pages and is not applicable for wired profiles.
Auth server 1
Auth server 2
Select any one of the following:
l
A server from the list of servers, if the server is already configured.
l
Internal Server
to authenticate user credentials at run time.
Table 26:
Internal Captive Portal Configuration Parameters