Specifications

Captive Portal Setup 407
Chapter 19
Modify the Logon Role
The logon role should have only the control and captive portal ACLs assigned.
ACLs that allow other forms of authentication (such as VPN) should be
removed from the logon role.
To view the ACLs assigned to the various roles, use the following command:
In this case, the logon role shown at the bottom of the list has three ACLs:
control, vpnlogon, and captiveportal. The vpnlogon ACL should be removed:
(Alcatel) # show rights
RoleTable
---------
Name ACL Bandwidth ACL List
---- --- --------- --------
ap-role 3 No Limit control
trusted-ap 5 No Limit allowall
guest 2 No Limit allowall
stateful-dot1x 4 No Limit stateful-dot1x control
logon 1 No Limit control vpnlogon captiveportal
(Alcatel) # configure terminal
Enter Configuration commands, one per line. End with CTRL/Z
(Alcatel) (config) # user-role logon
(Alcatel) (config-role) # no session-acl vpnlogon