325| Captive Portal Authentication AOS-W 6.5.3.x| User Guide
Entity Engineering Business Faculty
Captive portal login
page
/auth/eng-login.html /auth/bus-login.html /auth/fac-login.html
Captive portal user role eng-user bus-user fac-user
Captive portal
authentication profile
eng-cp
(Specify /auth/eng-
login.html and eng-user)
bus-cp
(Specify /auth/bus-
login.html and bus-user)
fac-cp
(Specify /auth/bus-
login.html and fac-user)
Initial user role eng-logon
(Specify the eng-cp
profile)
bus-logon
(Specify the bus-cp
profile)
fac-logon
(Specify the fac-logon
profile)
AAA profile eng-aaa
(Specify the eng-logon
user role)
bus-aaa
(Specify the bus-logon
user role)
fac-aaa
(Specify the fac-logon
user role)
SSID profile eng-ssid bus-ssid fac-ssid
Virtual AP profile eng-vap bus-vap fac-vap
Table 78: Captive Portal login Pages
Changing the Protocol to HTTP
By default, the HTTPS protocol is used on redirection to the Captive Portal page. If you need to use HTTP
instead, you need to do the following:
n Modify the captive portal authentication profile to enable the HTTP protocol.
n For captive portal with role-based access only—Modify the captiveportal policy to permit HTTP traffic
instead of HTTPS traffic.
In the base operating system, the implicit ACL captive-portal-profile is automatically modified.
To change the protocol to HTTP via the WebUI:
1. Edit the captive portal authentication profile by navigating to the Configuration > Security >
Authentication > L3 Authentication page.
a. Enable (select) “Use HTTP for authentication”.
b. Click Apply.
2. (For captive portal with role-based access only) Edit the captiveportal policy by navigating to the
Configuration > Security > Access Control > Policies page.
a. Delete the rule for “user mswitch svc-https dst-nat”.
b. Add a new rule with the following values and move this rule to the top of the rules list:
n source is user
n destination is the mswitch alias
n service is svc-http
n action is dst-nat
c. Click Apply.
To change the protocol to HTTP via the command-line interface, access the CLI in config mode and issue the
following commands:
(host)(config) #aaa authentication captive-portal profile
protocol-http
To Next Page
Loading...