Reference Guide

Dell PowerConnect ArubaOS 6.0 Command Line Interface | Reference Guide aaa authentication captive-portal | 18
Usage Guidelines
You can configure the Captive Portal authentication profile in the base operating system or with the Next
Generation Policy Enforcement Firewall (PEFNG) license installed. When you configure the profile in the base
operating system, the name of the profile must be entered for the initial role in the AAA profile. Also, when you
configure the profile in the base operating system, you cannot define the default-role.
Example
The following example configures a Captive Portal authentication profile that authenticates users against the
controller’s internal database. Users who are successfully authenticated are assigned the auth-guest role.
To create the auth-guest user role shown in this example, the PEFNG license must be installed in the controller.
aaa authentication captive-portal guestnet
default-role auth-guest
user-logon
no guest-logon
server-group internal
show-fqdn Allows the user to see and select the fully-qualified domain
name (FQDN) on the login page. The FQDNs shown are
specified when configuring individual servers for the server
group used with captive portal authentication.
enabled/
disabled
disabled
show-acceptable-
use-policy
Show the acceptable use policy page before the logon
page.
enabled/
disabled
disabled
single-session Allows only one active user session at a time. — disabled
switch-in-
redirection-url
Sends the controller’s IP address in the redirection URL
when external captive portal servers are used. An external
captive portal server can determine the controller from
which a request originated by parsing the ‘switchip’
variable in the URL.
enabled/
disabled
disabled
sygate-on-
demand-agent
Enables client remediation with Sygate-on-demand-agent
(SODA).
NOTE: This parameter requires the PEFNG license.
enabled/
disabled
disabled
use-chap Use CHAP protocol. You should not use this option unless
instructed to do so by an Dell representative.
enabled/
disabled
disabled (PAP is
used)
user-logon Enables Captive Portal with authentication of user
credentials.
enabled/
disabled
enabled
welcome-page <url> URL of the page that appears after logon and before
redirection to the web URL. This can be set to any URL.
— /auth/
welcome.html
Parameter Description Range Default