6

Need some assistance with a small query. Can a 5508 WLC be configured to host multiple concurrent captive portals? Have been googling for the information but if anyone has the info available, I would appreciate it. Thanks:-)

1
  • Thanks Ricky Beam and Generalnetworkerror. I would consider this query solved!
    – user4565
    Commented Aug 27, 2014 at 20:04

2 Answers 2

4

Based on this Configuration Guide, it would appear to only support one portal. I don't know if there's a way to specify the SSID (network) to the portal page / WLC. (I've never needed to. [it's in the wlan query param])

Update: Apparently 7.3+ can, but it's a lot more involved. "Assigning Login, Login Failure, and Logout Pages per WLAN"

4

Not directly on the WLC, but using Cisco ACS, ISE or other RADIUS server, you can set the captive URL using the url-redirect value of the cisco-av-pair RADIUS attribute. This overrides the WLC default setting for External Webauth URL. You can also set the url-redirect-acl to match a named ACL on the WLC.

ACS url-redirect RADIUS attribute

2
  • Nice to know, but not useful here as there won't be a login event until they've already been directed to the portal. For a dot1x authenticated client, sure, but why would you send an already authenticated client to a captive portal?
    – Ricky
    Commented Aug 27, 2014 at 22:39
  • @RickyBeam, one possible reason to redirect a dot1x client is forcing internal users to agree to an AUP / EULA every time. If they have already authenticated, you can associate an identity with that AUP / EULA agreement. Commented Sep 17, 2014 at 10:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.