Users Guide

Dell PowerConnect W-Series ArubaOS 6.1 | User Guide Captive Portal | 353
What follows are the tasks for configuring captive portal in the base ArubaOS. The example server group and
profile names appear inside quotation marks.
 Create the Server Group name. In this example, the server group name is “cp-srv”.
If you are configuring captive portal for registered users, configure the server(s) and create the server group.
For more information about configuring authentication servers and server groups, see Chapter 9,
“Authentication Servers” .
 Create Captive Portal Authentication Profile. In this example, the profile name is “c-portal”.
Create and configure an instance of the captive portal authentication profile. Creating the captive portal
profile automatically creates an implicit user role and ACL with the same name. Creating the profile “c-
portal” creates an implicit user role called “c-portal”. That user role allows only DNS and DHCP traffic
between the client and network and directs all HTTP or HTTPS requests to the captive portal.
 Create an AAA Profile. In this example, the profile name is “aaa_c-portal”.
Create and configure an instance of the AAA profile. For the initial role, enter the implicit user role that was
created in stepl. The initial role in the profile “aaa_c-portal” must be set to “c-portal”.
 Create SSID Profile. In this example, the profile name is “ssid_c-portal”.
Create and configure an instance of the virtual AP profile which you apply to an AP group or AP name. Specify
the AAA profile you created in stepl.
 Create a Virtual AP Profile. In this example, the profile name is “vp_c-portal”.
Create and configure an instance of the SSID profile for the virtual AP.
The following sections present the procedure for configuring the captive portal authentication profile, the AAA
profile, and the virtual AP profile using the WebUI or the command line (CLI). Configuring the VLAN and
authentication servers and server groups are described elsewhere in this document.
Configuring Captive Portal via the WebUI
1. Navigate to the Configuration > Security > Authentication > L3 Authentication page. Select Captive
Portal Authentication Profile.
a. In the Captive Portal Authentication Profile Instance list, enter the name of the profile (for example, c-
portal), then click Add.
b. Select the captive portal authentication profile you just created.
c. You can enable user login and/or guest login, and configure other captive portal profile parameters as
described in Table 64.
d. Click Apply.
2. To specify authentication servers, select Server Group under the captive portal authentication profile you just
configured.
a. Select the server group (for example, cp-srv) from the drop-down menu.
b. Click Apply.
3. Select the AAA Profiles tab.
a. In the AAA Profiles Summary, click Add to add a new profile. Enter the name of the profile (for example,
aaa_c-portal), then click Add.
b. Select the AAA profile you just created.
NOTE: In ArubaOS 2.5.2 and later 2.5.x releases, captive portal users in the base operating system are placed into the predefined
cpbase initial user role before authentication. The cpbase role is not supported in ArubaOS 3.x. You need to create new captive
portal profiles in the base operating system, as described in this section, which automatically generates the required policies and
roles.