Captive Portal Authentication Workflow - AMIGOPOD PowerConnect W Clearpass 100 Software Integration Manual

Amigopod and ArubaOS Integration

Captive Portal Authentication Workflow

Figure 2 shows the phases that a guest user passes through during a captive portal authentication
process. In the Aruba system, the mobility controller acts as the network access server (NAS) and
Amigopod acts as the RADIUS server.
Guest
Associates [1]
Complete login form
Automated NAS login
Internet browsing
1. The guest user associates their Wi-Fi device to the guest SSID. In the baseline VRD
configuration, this SSID is "Guest-Network."
2. The guest user opens a browser. Based on the configured home page or requested web page,
the initial HTTP traffic is intercepted by the Aruba controller and redirected to the Amigopod web
login page defined in the captive portal profile.
3. The guest user enters their user credentials on the Amigopod web login page. Amigopod
performs any preauthorization checks that are required and displays the login message to the
guest user.
Aruba Networks, Inc.
Figure 2
Mobility Controller (NAS)
Unregistered role
Redirects
Guest role [7]
Session timeout [10]
Figure 2 Workflow for captive portal authentication
details the captive portal authentication workflow.
Amigopod VMA
Browse to Landing page [2]
Submit form [3]
Login Message page [4]
Access-Request [5]
Access-Accept [6]
Accounting-Request [8]
Accounting-Response
Accounting-Request [9]
Accounting-Response [9]
Accounting-Request [11]
Accounting-Response
States:
Unauthorized
Authenticating
Authorized
Web login
Authentication
Authorization
Accounting
Interim Accounting
Accounting
Captive Portal Authentication
Application Note
| 10