Users Guide

1087| Behavior and Defaults Dell Networking W-Series ArubaOS 6.5.x| User Guide
Predefined Policy Description
any any svc-tftp permit
any any svc-dhcp permit
any any svc-natt permit
NOTE: In most
cases wired ports
should be made
"trusted" when
attached to an
internal network.
ip access-list session captiveportal
user alias mswitch svc-https dst-nat 8081
user any svc-http dst-nat 8080
user any svc-https dst-nat 8081
user any svc-http-proxy1 dst-nat 8088
user any svc-http-proxy2 dst-nat 8088
user any svc-http-proxy3 dst-nat 8088
Enables Captive
Portal
authentication.
1. Any HTTPS
traffic destined
for the
controller will
be NATed to
port 8081,
where the
captive portal
server will
answer.
2. All HTTP traffic
to any
destination will
be NATed to the
controller on
port 8080,
where an HTTP
redirect will be
issued.
3. All HTTPS traffic
to any
destination will
be NATed to the
controller on
port 8081,
where an HTTP
redirect will be
issued.
4. All HTTP proxy
traffic will be
NATed to the
controller on
port 8088.
NOTE: In order
for captive portal
to work properly,
DNS must also be
permitted. This is
normally done in
the "logon-
control" firewall
rule.