topic PAN-OS 8.1 Partial IPs Captive Portal redirect not working in General Topics

PAN-OS 8.1 Partial IPs Captive Portal redirect not working

TysonLiu — Thu, 23 Jul 2020 13:38:08 GMT

Hi Everyone

I have some problem for Captive Portal redirect.

PAN-OS - 8.1

SSL decryption - enable

Authentication - Active Directory

IPs - 1000+-

Platform - 3250 Series

the problem is partial IPs cannot get captive portal page to authentication, but partial IPs success work at captive portal,

we think maybe the loopback ip already been used at other device or browser not support redirecting , but at the same time, if some ip can work CP page, they can success do anything at browser like authentication / search / interneting etc..,

if some IPs cannot work CP redirect, they'll get error page and cannot do anything.

could anyone can help provide some CLI command to display how many authentication rate at Captive Portal per single IP.

Thanks

Tyson

Re: PAN-OS 8.1 Partial IPs Captive Portal redirect not working

Remo — Sat, 01 Aug 2020 09:48:40 GMT

Hi @TysonLiu

What error page do these users see when they are redirected?

What do you mean by "display how many authentication rate at Captive Portal per single IP"? Do you have multiple users from one single IP - maybe because of a source NAT?

Re: PAN-OS 8.1 Partial IPs Captive Portal redirect not working

TysonLiu — Tue, 11 Aug 2020 12:08:51 GMT

Hi @Remo

Sorry for the late reply,

Just loaded page few times then display error page,

What do you mean by "display how many authentication rate at Captive Portal per single IP"? Do you have multiple users from one single IP - maybe because of a source NAT?

No any single SNAT ip from their ingress interface.

We tried increase authentication timer, and then we saw the problem been reduced, but issue not solve.

Thanks

Tyson