Aruba Wireless - Captive Portal Authentication

[Nuwave]

Hi Guys,

Has anyone implemented a captive portal solution? If so, did you authenticate using LDAP?

I want users in a certain group in AD to be allowed on my Captive portal network. Anyone know how to do this?

-Mike

 

[imagoon]

Hi Guys,

Has anyone implemented a captive portal solution? If so, did you authenticate using LDAP?

I want users in a certain group in AD to be allowed on my Captive portal network. Anyone know how to do this?

-Mike

I did it with RADIUS personally. WPA2-Enterprise. You specify the authorized user group in the RADIUS server.


*** actually I should explain. I did captive portal only for guests. The Employee wireless was not done this way. They are not required to "log in" because the computers automatically log in via certificates and clients log in afterwards (automatically).

IE Employee turns on their laptop:
Computer connects to the wireless and authorizes using its own computer account and password. Once the user is at the login screen, they log in with normal windows credentials which the wireless driver in Windows passes along to the wireless card to allow the user to connect.

 

[Nuwave]

I have an internal network that is 802.1x. Uses Radius to point to a specific group.

I also have an outside network that is being used and abused.
I want to put captive portal and authenticate using LDAP.

 

[imagoon]

I have an internal network that is 802.1x. Uses Radius to point to a specific group.

I also have an outside network that is being used and abused.
I want to put captive portal and authenticate using LDAP.

Can you give me more information about how and why? RADIUS is more typically used for this than LDAP. Esp since it takes the "login" part out of the loop for authorized devices and allows local users to just log in via their windows credentials otherwise. The captive portal tends to be used more often for guests, not employees. You can add Radius the AAA on the captive portal also. You create a RADIUS "source" IP and use that to build a second RADIUS connection and add groups to it from the IAS side.

Also call support, they will walk you through the configuration assuming you have a support contract. 1-800-WiFi-LAN (1-800-943-4526)