After writing your own HTML, then you need to ensure that your customized pop-up box will access yo urnew
loggedout file. In the pop-up box example above, you simply replacethe "/auth/logout.html"wi th your own filet hat
you upload to the controller. For example,if your customiz ed logout HTML is stored in a file called "loggedout.html"
then your "pop-up.html"file should referenceit like this:
<html>
<body bgcolor=white text=000000>
<font face="Verdana, Arial, Helvetica, sans-serif" size=+1>
<b>Logout</b></font>
<p>
<a href="/upload/loggedout.html"> Click to Logout </a>
</body>
</html>
Creating Walled Garden Acc ess
Ont heI nternet,a walled garden typically controls a user’s access to web content and services. The walled garden
directs the user’snavigation wit hinparticular areas to allow access to a selection of websites or prevent access to
other websites.
NOTE:The Wal led Garden featurecan be used wi ththe PEFNG or PEFV li censes.
Walledgarden access is needed when an externalor internal captive portal is used. A common example could be a
hotel environmentwhere unauthenticated usersare allowed to navigate to a designated login page(for example, a
hotel website) and all its contents.
Users who do not sign up for Internet service can view “allowed” websites (typically hotel property websites). The
website names must be DNS-based (not IP address based) and support the option to define wildcards.This w orks
for client devices with or without HTTP proxy settings.
Whena user attempts to navigate to other websites not configuredi n the white list walled garden profile,the user is
redirectedback to the login page.In additi on,t heblack listed walled garden profilei s configuredto explicitly block
navigation to websites from unauthenticated users.
In the WebUI
1. Navigate t o Advanced Services > Stateful Firewall > Destination.
2. ClickAdd to add a destination name.
3. Select the controller IP version, IPv4 or IPv6 ,from the IP Versiondrop-down menu.
4. In t he Destination Name field, enter a name and click Add.
5. Select namefrom the Rule Type drop-down menuand add a hostname or wildcard with domain name to which
an unauthenticateduser is redirected.
6. ClickApply.
7. Navigate t o Configuration > Security > Authentication > L3 Authentication.
8. Select Captive Portal Authentication Prof ile.
9. To allow users to access a domain, enter the destination name that contains the allowed domain names in the
White List field.This stops unauthenticated users from viewing specific domains such as a hotel websit e.
A rulei nt hewhit e list must explicitly permit a traffics ession beforei t is forwardedt o the controller.The last
rulein the whit e list denies everything else.
10. To deny users access to a domain,enter thedestinatio n name that contains prohibited domain namesin the
Black List field. This prevents unauthenticatedusers from viewing specific w ebsites.
DellPowerConnect W- Series ArubaOS 6.2 | UserGuide CaptivePortal Authentication |265