Dell 6.2 Configuring R edirection to a Proxy Server

252| Captive Port al Authentication DellPowerConnect W- Series ArubaOS 6.2 | User Guide
1. E dit the captive portal authentication profile by navigating to the Configuration > Security > Authentication
> L3 Authentication page.
a. Enable (select) “Use HTTP for authentication”.
b. Click Apply.
2. (Fo r captive portal with role-based access only) Edit the captiveportal policy by navigating to the Configuration
> Security > Access Control > Policies page.
a. Delete the rulefor “ usermswi tch svc-https dst-nat”.
b. Add a new rule with the following values and move this ruleto the top of the rules list:
lsource is user
ldestination is the mswitch alias
lservice is svc-http
laction is dst-nat
c. Click Apply.
To change theproto col to HTTP via the command-linei nterface,access the CLI i nc onfigmode and issue the
followingco mmands:
(host)(config) #aaa authentication captive-portal profile
protocol-http
(For captive portal with role-based access only)
(host)(config) #ip access-list session captiveportal
no user alias mswitch svc-https dst-nat
user alias mswitch svc-http dst-nat
user any svc-http dst-nat 8080
user any svc-https dst-nat 8081
Configuring R edirection to a Proxy Server
You can configurecaptive portal to work with proxy Web servers.When proxy Web servers areused, browser proxy
serversett ings for end usersare co nfiguredfor the proxy server’s IP address and TCP po rt. Whenthe user opens a
Web browser,the HTTP/S connection request must be redirected from the proxyserver to the capti ve portalon the
controller.
To configure captive portal to work with a proxy server:
l(For captive portal with base operating system) Modify the captive portal authentication profile to specify the
proxy server’sIP address and TCP port.
l(For captive portal with role-based access) Modify the captiveportal policy to have traffic for the proxy server’s
port destination NATed to port 8088 on the controller.
The base operating system automatically modifies the implicit ACL captive-portal-profile .
The followingsecti ons describehow use the WebUI and CLI to configure the captive portal with a proxy server.
NOTE:When HTTPS trafficis redirected from a proxy server to thecontroll er, the user’s browser will display a warning that the
subjectname on the certificate does not match the hostname to which the user is connecting.
To redirect proxy server traffic using the WebUI:
1. Fo r captive portal with Dell base operating system, edit t he captive portal authentication profile by navigating to
the Configuration > Security > Authentication > L3 Authentication page.
a. For Proxy Server,enter the IP address and port for the proxy server.
b. Click Apply.