In the CLI
To configure security settings for guest users of the WLAN SSID profile:
(Instant AP)(config)# wlan ssid-profile <name>
(Instant AP)(SSID Profile <name>)# essid <ESSID-name>
(Instant AP)(SSID Profile <name>)# type <Guest>
(Instant AP)(SSID Profile <name>)# captive-portal{<type>[exclude-uplink <types>]|external
[exclude-uplink <types>| profile <name>[exclude-uplink <types>]]}
(Instant AP)(SSID Profile <name>)# captive-portal-proxy-server <IP> <port>
(Instant AP)(SSID Profile <name>)# blacklist
(Instant AP)(SSID Profile <name>)# mac-authentication
(Instant AP)(SSID Profile <name>)# max-authentication-failures <number>
(Instant AP)(SSID Profile <name>)# auth-server <server-name>
(Instant Access Point (SSID Profile <name>)# radius-accounting
(Instant Access Point (SSID Profile <name>)# radius-interim-accounting-interval
(Instant Access Point (SSID Profile <name>)# radius-accounting-mode {user-association|user-
authentication}
(Instant AP)(SSID Profile <name>)# wpa-passphrase <WPA_key>
(Instant AP)(SSID Profile <name>)# wep-key <WEP-key> <WEP-index>
(Instant AP)(SSID Profile <name>)# end
(Instant AP)# commit apply
To configure security settings for guest users of the wired profile:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# type <Guest>
(Instant AP)(wired ap profile <name>)# captive-portal{<type>[exclude-uplink <types>]|external
[exclude-uplink <types>| profile <name>[exclude-uplink <types>]]}
(Instant AP)(wired ap profile <name>)# mac-authentication
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
External Captive Portal Redirect Parameters
If the external captive portal redirection is enabled on a network profile, IAP sends an HTTP response with the
redirect URL to display the splash page and enforce captive portal authentication by clients. The HTTP
response from the IAP includes the following parameters:
Table 29: External Captive Portal Redirect Parameters
Parameter
cmd
mac
essid
ip
apname
apmac
vcname
switchip
url
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Example Value
login
34:02:86:c6:d2:3e
guest-ecp-109
192.0.2.0
9c:1c:12:cb:a2:90
9c:1c:12:cb:a2:90
instant-C8:1D:DA"
securelogin.arubanetworks.com
http://www.google.com/
Description
Type of operation
Client MAC address
ESSID
Client IP address
IAP host name
IAP MAC address
VC name
Captive portal domain used for
external captive portal
authentication
original URL
Captive Portal for Guest Access |
133