Reply-Message. So, ClearPass processes the Reply-Message on the web login form and informs the user that
The max. number of sessions has been reached is the reason for authentication failure.
So, another RADIUS attribute is added in the reply message to the Captive Portal module from
Authentication module with the following two restrictions:
n There can be multiple Reply-Message attributes in a packet but only the first attribute is considered.
n The length of the reply message is limited to 256 characters.
RADIUS server and Authentication servers are required to be configured accordingly to send the reply message
against authentication success or failure scenarios
This feature is implemented in the following ways:
n For internal captive portal case
l In case of authentication success: Welcome page with the addition of custom defined Reply-Message is
displayed.
l In case of authentication failure: Log-in page is displayed again with the custom defined Reply-Message.
n For external captive portal case:
l In case of authentication success: Redirected to the welcome page.
l In case of authentication failure: Failure reason is mentioned on the initial screen
Customizing the Pop-Up box
In order to customize the Pop-Up box, you must first customize your Welcome page. Once you have
customized your welcome page, then you can configure your custom page to use a pop-up box. The default
HTML for the pop-up box is:
<html>
<body bgcolor=white text=000000>
<font face="Verdana, Arial, Helvetica, sans-serif" size=+1>
<b>Logout</b></font>
<p>
<a href="/auth/logout.html"> Click to Logout </a>
</body>
</html>
If you wish your users to be able to logout using this pop-up box, then you must include a reference to
/auth/logout.html Once a user accesses this URL then the switch will log them out. It is easiest to simply edit
the above HTML to suit your users and then upload the resulting file to the switch using the WebUI under
Configuration > Management > Captive Portal > Upload custom pages and choose "content” as the
page type.
Once you have completed your HTML, then you must get the clients to create the pop-up box once they have
logged into the switch. This is done by inserting the following code into your welcome page text and re-
uploading the welcome page text to your switch.
Common things to change:
n URL: set the URL to be the name of the pop-up HTML file that you created and uploaded. This should be
preceded by "/upload/".
n Width: set w to be the required width of the pop-up box.
n Height: set h to be the required height of the pop-up box.
n Title: set the second parameter in the window.open command to be the title of the pop-up box. Be sure to
include the quotes as shown:
<script language="JavaScript">
var url="/upload/popup.html";
var w=210;
AOS-W 6.5.3.x | User Guide Captive Portal Authentication | 338