• Virtual IP use for a CPPM server cluster
• CPPM servers configured in the switch RADIUS server group
• External load balancer
Captive Portal when disabled
By default, Captive Portal is disabled. If the Captive Portal feature is disabled and the switch receives a redirect
URL attribute from the RADIUS server as part of the Access-Accept, it will view the redirect as an error. The
authentication success will be overridden, the session will be flushed, and the switch will send the Accounting
Start and Accounting Stop messages to indicate the client is no longer authenticated.
The Captive Portal feature may be disabled while there are in flight authentication requests. These are
authentication sessions that have not finished the final authentication with the switch. The switch flushes all
sessions with a redirect URL associated with them when Captive Portal is disabled.
Fully authenticated sessions are not impacted when Captive Portal is disabled. If CPPM deems these sessions to
be invalid, a RADIUS Disconnect can be sent to flush all these sessions.
Disabling Captive Portal
To disable Captive Portal, enter one of the following:
switch(config)# aaa authentication captive-portal disable
switch(config)# no aaa authentication captive-portal enable
Configuring Captive Portal on CPPM
Procedure
1. Importing the HP RADIUS dictionary
2. Creating enforcement profiles
3. Creating a ClearPass guest self-registration
4. Configuring the login delay
Import the HP RADIUS dictionary
For CPPM versions 6.5.*, you must update the HP RADIUS dictionary. To import the dictionary in CPPM, follow
these steps:
Procedure
1. Go to Administration -> Dictionaries -> RADIUS and click Import.
2. Select the XML HP RADIUS Dictionary from your Hard Drive.
3. Click Import.
212 Aruba 2530 Management and Configuration Guide for
ArubaOS-Switch 16.05
To Next Page