Concept Guide

142 | Captive Portal for Guest Access Dell Networking W-Series Instant 6.4.3.1-4.2.0.0 | User Guide
(Instant AP)(SSID Profile <name>)# mac-authentication
(Instant AP)(SSID Profile <name>)# max-authentication-failures <number>
(Instant AP)(SSID Profile <name>)# auth-server <server-name>
(Instant Access Point (SSID Profile <name>)# radius-accounting
(Instant Access Point (SSID Profile <name>)# radius-interim-accounting-interval
(Instant Access Point (SSID Profile <name>)# radius-accounting-mode {user-association|user-
authentication}
(Instant AP)(SSID Profile <name>)# wpa-passphrase <WPA_key>
(Instant AP)(SSID Profile <name>)# wep-key <WEP-key> <WEP-index>
(Instant AP)(SSID Profile <name>)# end
(Instant AP)# commit apply
To configure security settings for guest users of the wired profile:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# type <Guest>
(Instant AP)(wired ap profile <name>)# captive-portal{<type>[exclude-uplink <types>]| external
[exclude-uplink <types>| profile <name>[exclude-uplink <types>]]}
(Instant AP)(wired ap profile <name>)# mac-authentication
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
External Captive Portal Redirect Parameters
If the external captive portal redirection is enabled on a network profile, W-IAP sends an HTTP response with
the redirect URL to display the splash page and enforce captive portal authentication by clients. The HTTP
response from the W-IAP includes the following parameters:
Parameters Example Value Description
cmd
login
Type of operation
mac
34:02:86:c6:d2:3e
Client MAC address
essid
guest-ecp-109
ESSID
ip
192.0.2.0
Client IP address
apname
9c:1c:12:cb:a2:90
AP hostname
apmac
9c:1c:12:cb:a2:90
AP MAC address
vcname
instant-C8:1D:DA"
VC name
switchip
securelogin.arubanetworks.com
Captive portal domain used for
external captive portal
authentication
url
http://www.google.com/
original URL
Table 28: External Captive Portal Redirect Parameters
Configuring External Captive Portal Authentication Using ClearPass Guest
You can configure Instant to point to ClearPass Guest as an external captive portal server. With this
configuration, the user authentication is performed by matching a string in the server response and RADIUS
server (either ClearPass Guest or a different RADIUS server).