06-10-2011 02:20 AM
Hello everybody,
When enabling Captive Portal either in vWire or Layer3 mode, the Layer3 interface that is used for redirection and has the "Response Pages" option enabled, is listening to certain ports for Captive portal.
Let's say that the configured hostname for redirection and for NTLM host is "palo alto" and is pointing to the IP address 10.0.0.1 of the ethernet1/13 interface. The ethernet1/13 interface has in the Interface Management profile assigned, also checked the option "Response Pages" and also the "Ping" service checked, but not the other services (telnet,ssh,http,https and snmp that are unchecked).
With the abovementioned configuration, thhe ports that the interface ethernet1/13 is listening are the following urls:
I have the impression that port 6080 is used for NTLM authentication and for Captive portal authentication (page with title "User Identification Portal" for protocol HTTP only (unsecure connection).
Port 6081 is used for NTLM and Captive Portal Authentication for protocol HTTPS (secure connection).
I do not understand the existence of port 6082 in PANOS 4.0, which seems that is listeing for protocol HTTPS and serving
both NTLM and Captive Portal Authentication
More specific, in order to test the abovementioned, I have used the following URLs:
http://paloalto:6080/esp/ntlm.esp?vsys=1&url=http://www.google.com
http://paloalto:6080/esp/uid.esp?vsys=1&url=http://www.google.com
https://paloalto:6081/esp/ntlm.esp?vsys=1&url=http://www.google.com
https://paloalto:6081/esp/uid.esp?vsys=1&url=http://www.google.com
https://paloalto:6082/esp/ntlm.esp?vsys=1&url=http://www.google.com
https://paloalto:6082/esp/uid.esp?vsys=1&url=http://www.google.com
Please explain me when each port is used.
Thank you,
George G.
Athens, Greece
06-10-2011 05:44 PM
Here are the services listening on the ports you have indicated:
6080-6081 Captive Portal captive portal redirect and URL override page
6082- Captive portal and captive portal redirect with certificate
06-10-2011 05:44 PM
Here are the services listening on the ports you have indicated:
6080-6081 Captive Portal captive portal redirect and URL override page
6082- Captive portal and captive portal redirect with certificate
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
