Filter
Top Products
2. For captive portal with role-based access, edit the captiveportal policy by navigating to the Configuration >
Security > Access Control > Policies page.
3. Add a new rule with the following values:
a. Source is user
b. Destination is any
c. Service is TCP
d. Port is the TCP port on the proxy server
e. Action is dst-nat
f. IP address is the IP address of the proxy port
g. Port is the port on the proxy server
4. Click Add to add the rule. Use the up arrows to move this rule just below the rule that allows HTTP(S) traffic.
5. Click Apply.
To redirect proxy server traffic via the command-line interface, access the CLI in config mode and issue the
following commands.
For captive portal with Dell base operating system:
(host)(config) #aaa authentication captive-portal profile
proxy host ipaddr port port
For captive portal with role-based access:
(host)(config) #ip access-list session captiveportal
user alias mswitch svc-https permit
user any tcp port dst-nat 8088
user any svc-http dst-nat 8080
user any svc-https dst-nat 8081
Redirecting Clients on Different VLANs
You can redirect wireless clients that are on different VLANs (from the controller’s IP address) to the captive portal
on the controller. To do this:
1. Specify the redirect address for the captive portal.
2. For captive portal with the PEFNG license only, you need to modify the captiveportal policy that is assigned to
the user. To do this:
a. Create a network destination alias to the controller interface.
b. Modify the rule set to allow HTTPS to the new alias instead of the mswitch alias.
NOTE: In the base operating system, the implicit ACL
captive-portal-profile
is automatically modified.
This example shows how to use the command-line interface to create a network destination called cp-redirect and
use that in the captiveportal policy:
(host)(config) #ip cp-redirect-address ipaddr
For captive portal with PEFNG license:
(host)(config) #netdestination cp-redirect ipaddr
(host)(config) #ip access-list session captiveportal
user alias cp-redirect svc-https permit
user any svc-http dst-nat 8080
user any svc-https dst-nat 8081
DellPowerConnectW-SeriesArubaOS6.2 | User Guide CaptivePortalAuthentication | 253