(Instant AP)(wired ap profile <name>)# type <guest>
(Instant AP)(wired ap profile <name>)# captive-portal {<internal-authenticated>|<internal-
acknowledged>} exclude-uplink {3G|4G|Wifi|Ethernet}
(Instant AP)(wired ap profile <name>)# mac-authentication
(Instant AP)(wired ap profile <name>)# auth-server <server1>
(Instant AP)(wired ap profile <name>)# radius-reauth-interval <Minutes>
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
To customize internal captive portal splash page:
(Instant AP)(config)# wlan captive-portal
(Instant AP)(Captive Portal)# authenticated
(Instant AP)(Captive Portal)# background-color <color-indicator>
(Instant AP)(Captive Portal)# banner-color <color-indicator>
(Instant AP)(Captive Portal)# banner-text <text>
(Instant AP)(Captive Portal)# decoded-texts <text>
(Instant AP)(Captive Portal)# redirect-url <url>
(Instant AP)(Captive Portal)# terms-of-use <text>
(Instant AP)(Captive Portal)# use-policy <text>
(Instant AP)(Captive Portal)# end
(Instant AP)# commit apply
To upload a customized logo from a TFTP server to the IAP:
(Instant AP)# copy config tftp <ip-address> <filename> portal logo
Configuring External Captive Portal for a Guest Network
This section provides the following information:
l
External Captive Portal Profiles on page 129
l
Creating a Captive Portal Profile on page 129
l
Configuring an SSID or Wired Profile to Use External Captive Portal Authentication on page 131
l
External Captive Portal Redirect Parameters
External Captive Portal Profiles
You can now configure external captive portal profiles and associate these profiles to a user role or SSID. You
can create a set of captive portal profiles in the
External Captive Portal
window (accessed from the
Security
tab) and associate these profiles with an SSID or a wired profile. You can also create a new captive portal profile
on the
Security
tab of the WLAN wizard or a Wired Network window. In the current release, you can configure
up to 16 external captive portal profiles.
When the captive portal profile is associated to an SSID, it is used before user authentication. If the profile is
associated to a role, it is used only after the user authentication. When a captive portal profile is applied to an
SSID or wired profile, the users connecting to the SSID or wired network are assigned a role with the captive
portal rule. The guest user role allows only DNS and DHCP traffic between the client and the network, and
directs all HTTP or HTTPS requests to the captive portal unless explicitly permitted to allow all types of traffic.
Creating a Captive Portal Profile
You can create a captive portal profile using the Instant UI or the CLI.
In the Instant UI
1. Go to
Security > External Captive Portal
.
2. Click
New
. The
New
popup window is displayed.
3. Specify values for the following parameters:
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Captive Portal for Guest Access |
129