Dell PowerConnect W Clearpass 100 Software ArubaOS Integration Cheat Sheet - Page 8

Ensure the Amigopod IP Address allowed in captiveportal policy

Page 8 highlights

ArubaOS + Amigopod Integration Cheet Sheet 7. Ensure the Amigopod IP Address allowed in captiveportal policy An entry needs to be placed in the firewall policy used to control pre-­‐authentication traffic for the guest users. Typically this is defined in the captiveportal policy can be modified easily through the CLI or GUI. It is handy to define the Amigopod appliance in an alias definition as shown below: netdestination Amigopod host 10.0.20.15 Add an entry that allows the client based HTTPS traffic to reach the hosted Captive Portal pages on the Amigopod appliance: ip access-list session captiveportal user alias Amigopod svc-http permit user alias mswitch svc-https dst-nat user any svc-http dst-nat 8080 user any svc-https dst-nat 8081 The equivalent the GUI configuration will look something like the screenshot below: Aruba Networks | 8

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19

ArubaOS + Amigopod Integration Cheet Sheet
Aruba Networks |
8
7.
Ensure the Amigopod IP Address allowed in captiveportal policy
An entry needs to be placed in the firewall policy used to control pre°authentication traffic for the
guest users. Typically this is defined in the
captiveportal
policy can be modified easily through the CLI
or GUI.
It is handy to define the Amigopod appliance in an alias definition as shown below:
netdestination Amigopod
host 10.0.20.15
Add an entry that allows the client based HTTPS traffic to reach the hosted Captive Portal pages on the
Amigopod appliance:
ip access-list session captiveportal
user
alias Amigopod svc-http permit
user
alias mswitch svc-https dst-nat
user any svc-http dst-nat 8080
user any svc-https dst-nat 8081
The equivalent the GUI configuration will look something like the screenshot below: