implicit user role or its rules. Upon authentication, captive portal clients are allowed full access to their ass igned
VLAN.
NOTE:The WLAN Wi zard within the ArubaOS WebUI allows for basic captive portal configuration forW LANsassociated with the
“default”ap-group: Configuration > W izards > WLAN Wizard. Follow the steps in the workflow pane within the wizard and refer to
thehelp tab for assistance.
What followsare the tasks for configuring captive portal in the base ArubaOS. Theexample server group andprofile
names appearinsi de quotation marks.
lCreate the ServerGroup name. In this example,t heserver group name is “cp-srv”.
If you are configuringcaptive portal for registered users, configuret heserver(s) and create the server group.For
more information about configuringauthenticat ion servers and servergroups, see Authenticatio n Serverson page
168.
lCreate Captive Portal Authentication Profile. In t his example,the profile name is “ c-portal”.
Create and configurean instance of the captive portal authentication profile. Creating the captive portal profile
automatically creates an implicit user roleand ACL wit ht hesame name. Creating the profile “c-portal” creates
an implicit user role called“ c-portal”.That userrole allows only D NS and DHCP traffic between the client and
network anddi rects all HTTP or HTTPS requests to the captive po rtal.
lCreate an AAA Profile. In this example, the profile name is “aaa_c-portal”.
Create andco nfigurean instance of the AAA profile. For the initial role, enter the implicit user role that was
created in step on page 235. The initial role in t he profile“ aaa_c-portal” must be set to “c-portal”.
lCreate SSID Profile. In this example, the profile namei s “ssid_c-portal”.
Create andconfigure an instance of thevi rtualAP profile which you apply to anAP group or AP name. Specify
the AAA profile you created in step on page 235 .
lCreate a Virtual AP Profile. In this example, the profile name is “vp_c-portal”.
Create andco nfigurean instance of the SSID profile for the virtual AP.
The followingsecti ons presentthe procedure for configuring the captive portal authentication profile,t heA AA
profile,and the virtual AP profile using the WebUI or the command line (CLI). Configuringthe VLAN and
authentication serversand server groups are describedelsewhere in this document.
NOTE:In ArubaOS 2.5.2 and later 2.5.x releases, captive portal users in the base operating systemare placed into the predefined
cpbase
initial user role before authentication. The
cpbase
role is notsupported in ArubaOS 3.x. You need to create new captive
portalprofil esi n thebase operating system, as described in this section, which automatically generates the required policies and
roles.
In the WebUI
1. Navi gate to the Configuration > Security > Authentication > L3 Authentication page. SelectC aptive Portal
Authentication Profile.
a. In the Captive Portal Authentication Profile Instance list, enter the name of the profile(for example, c-
portal), then click Add.
b. Select the capti ve portal authentication profile you just created.
c. You can enableuser login and/or guest login,and configure other captive portal profile parameters as described
in Table 68.
d. Click Apply.
DellPowerConnect W- Series ArubaOS 6.2 | UserGuide CaptivePortal Authentication |235