[prev in list] [next in list] [prev in thread] [next in thread]
List: packetfence-users
Subject: [PacketFence-users] Captive Portal Aruba Switch
From: Kai_Bass_(Westfalia_Spielgeräte_GmbH) via PacketFence-use
Date: 2024-03-05 15:32:10
Message-ID: VI1PR05MB55509F9D95C9B884AD1834F9CE232 () VI1PR05MB5550 ! eurprd05 ! prod ! outlook ! com
[Download RAW message or body]
Hello,
I am attempting to achieve a Captive Portal setup with PacketFence for exte=
rnal users using Aruba Switches. I have successfully configured authenticat=
ion via Active Directory for internal computers and users, which is functio=
ning properly. However, I am probably encountering an issue with the Switch=
configuration, as the Captive Portal isn't displayed automatically.
My Aruba 2540 Switch is configured as follows:
snmpv3 enable
snmpv3 restricted-access
snmpv3 group managerpriv user "packetfence" sec-model ver3
snmpv3 notify "Packetfencenotify" tagvalue "xxxxxxxxxx" type inform
snmpv3 targetaddress "PacketfenceTargetaddress" params "xxxxxxxxxxxxx" 172.=
25.0.124
taglist "xxxxxxxxxxxxxxxx"
snmpv3 user "packetfence"
aaa server-group radius "PacketFence" host 172.25.0.124
aaa accounting network start-stop radius server-group "PacketFence"
aaa authentication port-access eap-radius server-group "PacketFence"
aaa authentication mac-based chap-radius server-group "PacketFence"
aaa authentication captive-portal enable
aaa authentication captive-portal profile "CaptiveGuestPortal"
aaa port-access authenticator 20
aaa port-access authenticator 20 tx-period 10
aaa port-access authenticator active
aaa port-access mac-based 20
aaa port-access mac-based 20 addr-moves
aaa port-access mac-based 20 reauth-period 14400
aaa port-access 20 auth-order authenticator mac-based
I can confirm that the MAC address is being accepted by PacketFence, and th=
e laptop is gaining access to the network. However, when I open a browser, =
no Captive Portal is displayed automatically. I can manually open it by ent=
ering "172.25.0.124/captive-portal", and I can see that PacketFence is appl=
ying the Guest role. But when I click on the node, it says the node (Mac-Ad=
dress) does not exist.
I am also a bit confused about the network device guide: [PacketFence Netwo=
rk Devices Configuration Guide](https://www.packetfence.org/doc/PacketFence=
_Network_Devices_Configuration_Guide.html#_aruba). It states that I should =
enter "Role by Web Auth URL" as "http://172.25.0.124/Aruba::ArubaOS_Switch_=
16_x". However, when I try that link in my browser, it says "not implemente=
d GET not supported for current URL". Instead, I entered "http://172.25.0.1=
24/captive-portal", but I'm not sure if that is correct or if I missed some=
thing.
My main issue remains that the Captive Portal is not shown automatically. A=
ny help would be great, so i can understand the mistake better.
Thank you!
Regards
Kai
[Attachment #3 (text/html)]
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} \
</style> </head>
<body dir="ltr">
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);">Hello,</span></div> <div><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);"><br> </span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);">I am attempting to achieve a Captive Portal setup with PacketFence for \
external users using Aruba Switches. I have successfully configured authentication \
via Active Directory for internal computers and users, which is functioning properly. \
However, I am probably encountering an issue with the Switch configuration, as the \
Captive Portal isn't displayed automatically.</span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, \
Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"><br> \
</span></div> <div class="elementToProof"><span style="font-family: Aptos, \
Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: \
11pt; color: rgb(0, 0, 0);">My Aruba 2540 Switch is configured as \
follows:</span></div> <div><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);"><br> </span></div>
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, \
Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">snmpv3 \
enable</span></div> <div><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);">snmpv3 restricted-access</span></div> <div><span style="font-family: Aptos, \
Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: \
11pt; color: rgb(0, 0, 0);">snmpv3 group managerpriv user "packetfence" \
sec-model ver3</span></div> <div class="elementToProof"><span style="font-family: \
Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; \
font-size: 11pt; color: rgb(0, 0, 0);">snmpv3 notify "Packetfencenotify" \
tagvalue "xxxxxxxxxx" type inform</span></div> <div \
class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);">snmpv3 targetaddress "PacketfenceTargetaddress" params \
"xxxxxxxxxxxxx" 172.25.0.124</span></div> <div class="elementToProof"><span \
style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, \
Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);"> taglist \
"xxxxxxxxxxxxxxxx"</span></div> <div><span style="font-family: Aptos, \
Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: \
11pt; color: rgb(0, 0, 0);">snmpv3 user "packetfence"</span></div> \
<div><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, \
Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">aaa \
server-group radius "PacketFence" host 172.25.0.124</span></div> <div><span \
style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, \
Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">aaa accounting network \
start-stop radius server-group "PacketFence"</span></div> <div><span \
style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, \
Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">aaa authentication \
port-access eap-radius server-group "PacketFence"</span></div> <div><span \
style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, \
Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">aaa authentication \
mac-based chap-radius server-group "PacketFence"</span></div> <div><span \
style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, \
Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">aaa authentication \
captive-portal enable</span></div> <div><span style="font-family: Aptos, \
Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: \
11pt; color: rgb(0, 0, 0);">aaa authentication captive-portal profile \
"CaptiveGuestPortal"</span></div> <div class="elementToProof"><span \
style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, \
Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">aaa port-access \
authenticator 20</span></div> <div><span style="font-family: Aptos, \
Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: \
11pt; color: rgb(0, 0, 0);">aaa port-access authenticator 20 tx-period \
10</span></div> <div><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);">aaa port-access authenticator active</span></div> <div><span \
style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, \
Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">aaa port-access \
mac-based 20</span></div> <div><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);">aaa port-access mac-based 20 addr-moves</span></div> <div><span \
style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, \
Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">aaa port-access \
mac-based 20 reauth-period 14400</span></div> <div><span style="font-family: Aptos, \
Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: \
11pt; color: rgb(0, 0, 0);">aaa port-access 20 auth-order authenticator \
mac-based</span></div> <div><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);"><br> </span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);">I can confirm that the MAC address is being accepted by PacketFence, and the \
laptop is gaining access to the network. However, when I open a browser, no Captive \
Portal is displayed automatically. I can manually open it by entering \
"172.25.0.124/captive-portal", and I can see that PacketFence is applying \
the Guest role. But when I click on the node, it says the node (Mac-Address) does \
not exist.</span></div> <div><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);"><br> </span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);">I am also a bit confused about the network device guide: [PacketFence Network \
Devices Configuration \
Guide](https://www.packetfence.org/doc/PacketFence_Network_Devices_Configuration_Guide.html#_aruba). \
It states that I should enter "Role by Web Auth URL" as \
"http://172.25.0.124/Aruba::ArubaOS_Switch_16_x". However, when I try that \
link in my browser, it says "not implemented GET not supported for current \
URL". Instead, I entered "http://172.25.0.124/captive-portal", but I'm \
not sure if that is correct or if I missed something.</span></div> <div \
class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);">My main issue remains that the Captive Portal is not shown automatically. Any \
help would be great, so i can understand the mistake better.</span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);"><br> </span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);">Thank you!</span></div> <div class="elementToProof"><span style="font-family: \
Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; \
font-size: 11pt; color: rgb(0, 0, 0);"><br> </span></div>
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, \
Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, \
0, 0);">Regards</span></div> <div class="elementToProof"><span style="font-family: \
Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; \
font-size: 11pt; color: rgb(0, 0, 0);">Kai</span></div> <div id="Signature">
<table style="width: 585pt;">
<tbody>
<tr>
<td style="padding: 0cm; vertical-align: top;"></td>
<td style="padding: 0cm; vertical-align: bottom;"></td>
</tr>
</tbody>
</table>
</div>
</body>
</html>
[Attachment #4 (--===============6552288684820558204==)]
_______________________________________________
PacketFence-users mailing list
PacketFence-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/packetfence-users
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic