topic Captive Portal on connecting to SSID rather than via Browser for Apple devices - is it possible? in General Topics

Captive Portal on connecting to SSID rather than via Browser for Apple devices - is it possible?

kalyanram.piratla — Tue, 12 Feb 2013 20:01:28 GMT

Hello Everyone,

I was just wondering if it is possible to have captive portal pop up on connecting to a SSID rather than having the captive portal page upon accessing any website for apple devices? Captive Portal works on accessing any website using safari.

I tried blocking www.apple.com/library/test/success.html as a custom url so that the iPad does not check for internet connection in the background. It does not seem to work for me.

Am I missing something in terms of configuration or is it not possible for the PA-500?

Many Thanks,

Kalyan

Re: Captive Portal on connecting to SSID rather than via Browser for Apple devices - is it possible?

BobW — Tue, 12 Feb 2013 21:12:54 GMT

A lot of wireless units can have a redirect on connect to SSID which you should be able to point towards the CP on the PA-500. But, when the timeout happens on the PA-500, the unit will still be on the wireless, which means they will be blocked until the authenticate again by going to a webpage.

From the info I have gathered, the "success" page by Apple is mean to do exactly what you want: Hit a page via http and prompt for captive portal if you can't get out.

Does that help?

Bob

Re: Captive Portal on connecting to SSID rather than via Browser for Apple devices - is it possible?

kalyanram.piratla — Tue, 12 Feb 2013 21:43:18 GMT

Not exactly. I dont want to open up any browser or access any webpage to be captive portal'd.

What I meant to say was: I take my iPad, find a SSID Guest and connect to it. Upon clicking on Guest, I would like to see the captive portal screen.

Either I have completely misunderstood your opinion or my thoughts are way to fancy

Cheers

Kalyan

Re: Captive Portal on connecting to SSID rather than via Browser for Apple devices - is it possible?

mharding — Tue, 12 Feb 2013 21:51:20 GMT

Do you have a WPA/WPA2 password on your guest network?

Re: Captive Portal on connecting to SSID rather than via Browser for Apple devices - is it possible?

kalyanram.piratla — Tue, 12 Feb 2013 22:16:54 GMT

Nope. The guest networks was taken as an example. I am trying to have this sorted for students who are handed over iPads to connect to the student SSID. So ideally they would be using their domain accounts.

Re: Captive Portal on connecting to SSID rather than via Browser for Apple devices - is it possible?

scantwell — Tue, 12 Feb 2013 23:58:56 GMT

Ok, but that is exactly what CP is.... getting user credentials via a web page.

My recommendation could be to take a look at some of the API scripts that PA has written with its vendors, so when a user IS authenticated to a wireless network, those credentials are sent via REST API to the FW. This functionality is discussed in the PA205 class, and there are scripts written, which would accomplish this.

I do not think it will be a straight copy/paste and it's working, it will require some tweaking on your part.

Let me know if this is what is closer to what you are looking for.