Need some assistance with a small query. Can a 5508 WLC be configured to host multiple concurrent captive portals? Have been googling for the information but if anyone has the info available, I would appreciate it. Thanks:-)
2 Answers
Based on this Configuration Guide, it would appear to only support one portal. I don't know if there's a way to specify the SSID (network) to the portal page / WLC. (I've never needed to. [it's in the wlan
query param])
Update: Apparently 7.3+ can, but it's a lot more involved. "Assigning Login, Login Failure, and Logout Pages per WLAN"
Not directly on the WLC, but using Cisco ACS, ISE or other RADIUS server, you can set the captive URL using the url-redirect
value of the cisco-av-pair
RADIUS attribute. This overrides the WLC default setting for External Webauth URL. You can also set the url-redirect-acl to match a named ACL on the WLC.
-
Nice to know, but not useful here as there won't be a login event until they've already been directed to the portal. For a dot1x authenticated client, sure, but why would you send an already authenticated client to a captive portal?– RickyCommented Aug 27, 2014 at 22:39
-
@RickyBeam, one possible reason to redirect a dot1x client is forcing internal users to agree to an AUP / EULA every time. If they have already authenticated, you can associate an identity with that AUP / EULA agreement. Commented Sep 17, 2014 at 10:27