Concept Guide

In the CLI
To configure security settings for guest users of the WLAN SSID profile:
(Instant AP)(config)# wlan ssid-profile <name>
(Instant AP)(SSID Profile <name>)# essid <ESSID-name>
(Instant AP)(SSID Profile <name>)# type <Guest>
(Instant AP)(SSID Profile <name>)# captive-portal{<type>[exclude-uplink <types>]|external
[exclude-uplink <types>| profile <name>[exclude-uplink <types>]]}
(Instant AP)(SSID Profile <name>)# captive-portal-proxy-server <IP> <port>
(Instant AP)(SSID Profile <name>)# blacklist
(Instant AP)(SSID Profile <name>)# mac-authentication
(Instant AP)(SSID Profile <name>)# max-authentication-failures <number>
(Instant AP)(SSID Profile <name>)# auth-server <server-name>
(Instant Access Point (SSID Profile <name>)# radius-accounting
(Instant Access Point (SSID Profile <name>)# radius-interim-accounting-interval
(Instant Access Point (SSID Profile <name>)# radius-accounting-mode {user-association|user-
authentication}
(Instant AP)(SSID Profile <name>)# wpa-passphrase <WPA_key>
(Instant AP)(SSID Profile <name>)# wep-key <WEP-key> <WEP-index>
(Instant AP)(SSID Profile <name>)# end
(Instant AP)# commit apply
To configure security settings for guest users of the wired profile:
(Instant AP)(config)# wired-port-profile <name>
(Instant AP)(wired ap profile <name>)# type <Guest>
(Instant AP)(wired ap profile <name>)# captive-portal{<type>[exclude-uplink <types>]|external
[exclude-uplink <types>| profile <name>[exclude-uplink <types>]]}
(Instant AP)(wired ap profile <name>)# mac-authentication
(Instant AP)(wired ap profile <name>)# end
(Instant AP)# commit apply
External Captive Portal Redirect Parameters
If the external captive portal redirection is enabled on a network profile, W-IAP sends an HTTP response with
the redirect URL to display the splash page and enforce captive portal authentication by clients. The HTTP
response from the W-IAP includes the following parameters:
Parameter Example Value Description
cmd login Type of operation
mac 34:02:86:c6:d2:3e Client MAC address
essid guest-ecp-109 ESSID
ip 192.0.2.0 Client IP address
apname 9c:1c:12:cb:a2:90 W-IAP host name
apmac 9c:1c:12:cb:a2:90 W-IAP MAC address
vcname instant-C8:1D:DA" VC name
switchip securelogin.arubanetworks.com Captive portal domain used for
external captive portal
authentication
url http://www.google.com/ original URL
Table 29: External Captive Portal Redirect Parameters
Dell Networking W-Series Instant 6.5.1.0-4.3.1.0 | User Guide Captive Portal for Guest Access | 129