Cisco Systems ISA550 Using External Web-Hosted CGI Scripts

Wireless (for ISA550W and ISA570W only)

Using External Web-Hosted CGI Scripts

Cisco ISA500 Series Integrated Security Appliances Administration Guide 228

the VLAN to which Captive Portal users join should be able to access the

web-server.

• Check if the web-server has any issues.

Using External Web-Hosted CGI Scripts

Following is a CGI script which asks for the authentication information of a user.

The secret string programmed in the uamsecret variable should be configured

as Authentication Web Key on the Captive portal page. Replace the MySMB string

in the following section with your company name.

# !/usr/bin/perl

# chilli - ChilliSpot.org. A Wireless LAN Access Point Controller

# The contents of this file may be used under the terms of the GNU

# General Public License Version 2, provided that the above copyright

# notice and this permission notice is included in all copies or

# substantial portions of the software.

# Redirects from ChilliSpot daemon:

# Redirection when not yet or already authenticated

# notyet: ChilliSpot daemon redirects to login page.

# already: ChilliSpot daemon redirects to success status page.

# Response to login:

# already: Attempt to login when already logged in.

# failed: Login failed

# success: Login succeded

# logoff: Response to a logout

# Shared secret used to encrypt challenge with. Prevents dictionary attacks.

# You should change this to your own shared secret.

$uamsecret = "ht2eb8ej6s4et3rg1ulp";

# Uncomment the following line if you want to use ordinary user-password

# for radius authentication. Must be used together with $uamsecret.

$userpassword=1; [1]

# Our own path

$loginpath = $ENV{'SCRIPT_URL'};

use Digest::MD5 qw(md5 md5_hex md5_base64);

# Make sure that the form parameters are clean