Dell W-7030 AOS 6.4.x User Guide - Page 1134

Predefined Policy any any svc-adp permit any any svc-tftp permit any any svc-dhcp permit any any svc-natt permit ip access-list session captiveportal user alias mswitch svc-https dst-nat 8081 user any svc-http dst-nat 8080 user any svc-https dst-nat 8081 user any svc-http-proxy1 dst-nat 8088 user any svc-http-proxy2 dst-nat 8088 user any svc-http-proxy3 dst-nat 8088 Description NOTE: In most cases wired ports should be made "trusted" when attached to an internal network. Enables Captive Portal authentication. 1. Any HTTPS traffic destined for the controller will be NATed to port 8081, where the captive portal server will answer. 2. All HTTP traffic to any destination will be NATed to the controller on port 8080, where an HTTP redirect will be issued. 3. All HTTPS traffic to any destination will be NATed to the controller on port 8081, where an HTTP redirect will be issued. 4. All HTTP proxy traffic will be NATed to the controller on port 8088. NOTE: In order for captive portal to work properly, DNS must also be permitted. This is normally done in the "logon-control" firewall rule. 1134 | Behavior and Defaults Dell Networking W-Series ArubaOS 6.4.x | User Guide