Can not use captive portal

[TruongQuocAn]

Good afternoon!

I'm configuring captive portal to authenticate user through Radius. I followed steps on How to Setup Radius Authentication for Captive Portal ( enable UI on source & destination interface => create Radius Server Profile and Radius Authentication Profile => enable Captive Portal on UI with that Radius Profile & Transparent mode => create Captive Portal policy (web-form action)) but it didn't work.

I've use the cli "test cp-policy-match source x.x.x.x destination y.y.y.y", the result is "No rule matched".

Please help me with what I've missed. I'm using PA 5060, PANOS 5.0.8, multiple virtual system environment. Thank you very much.

[TruongQuocAn]

In fact, my situation is:

- Create two zones: zone A and zone B. Some PCs in zone A need to VNC remote to some PCs in zone B.

- I want to limit VNC connection. For example:

     + user1A in zone A can only VNC to PC1B in zone B, not all PCs in zone B.

     + user2A in zone A can only VNC to PC2B in zone B, not all PCs in zone B.

     + usernA in zone A can only VNC to PCnB in zone B, not all PCs in zone B.

Is it possible ?

Thank you very much.

[TruongQuocAn]

Finally, I knew what I had missed. That's the destination must have web service running. If the destination PC don't have an installed web server, the captive portal won't appear.

Thank you very much, Slawek. By the way, how do users logout their account that they've authenticated on captive portal ?

[_slv_ · Accepted solution]

Hi

That good news that it's working!

Please read this topic ending captive session with browser close

for information about logout.

Regards

SLawek