topic Re: Captive Portal with Vwire. in General Topics

Captive Portal with Vwire.

clyde.franklin — Thu, 14 Apr 2016 12:51:20 GMT

Why does below document advise we need a L3 interface for captive portal? We are running solely vwire and I still get on form when testing. I do have repsonse pages setup as well

https://live.paloaltonetworks.com/t5/Configuration-Articles/Configuring-Captive-Portal-in-V-Wire-with-RADIUS-Authentication/ta-p/58143

Re: Captive Portal with Vwire.

kiwi — Thu, 14 Apr 2016 13:37:12 GMT

Hi,

You are likely using Tranparent mode.

The document indicates it is using Redirect mode.

Cheers,

-Kim.

Re: Captive Portal with Vwire.

clyde.franklin — Thu, 14 Apr 2016 15:08:24 GMT

Thanks Kim I will change mode and retry

Re: Captive Portal with Vwire.

clyde.franklin — Thu, 14 Apr 2016 17:55:03 GMT

Just FYI changing mode did not work eiter I will spend some more time playing with it

Re: Captive Portal with Vwire.

rmonvon — Thu, 14 Apr 2016 18:42:07 GMT

Hi...Captive Portal (CP) is typically implemented by redirecting the users to the CP page which is tied to an L3 interface. The L3 interface will allow us to assign an SSL certificate to that interface IP because CP is encrypted in SSL to secure the user's credentials. Make sure the L3 interface has a mgmt profile that allows response page & userID.

Re: Captive Portal with Vwire.

clyde.franklin — Fri, 15 Apr 2016 14:29:12 GMT

Just to close loop in case anyone else runs into Issue. What can be done to rule out that a issue isnt related to Blue Coat Proxy (or any other proxy for that matter) Would be to view traffic logs and sort by destination country which will show you if you are hitting external website directy. In the event you never see external IP adress then you are hitting a proxy. Equally modifying the URL filter and check x-forwarded-for will not change behavior either as the proxy may not have it enabled or blocking untrusted certs. So to my knowledge no way to bypass inline Blue Coat with Palo Alto ----Unless someone has tried. This my reason for not getting CP page. I confirmed with TAC as well