Security

Under your page configuration, what do you have set as your Login Method and Address? If this is a redirect by the Aruba Mobility Gateway, you should have Controller Initiated as the Method and if you're leveraging a wildcard certificate on your Gateway, you can use "captiveportal-login.<your domain>.com". You can also control the post-login redirect via CPPM config or in the Gateway's L3 captive portal profile. 

Hi Michael, thanks for answering we are using a wild card certificate and the address is configured as "captiveportal-login.<your domain>.com" where yourdomain is swapped for our domain of course.

The Login method is set to controller initiated as well.

We've tried building it from the ground up again but we got the same result. 

Under your page configuration, what do you have set as your Login Method and Address? If this is a redirect by the Aruba Mobility Gateway, you should have Controller Initiated as the Method and if you're leveraging a wildcard certificate on your Gateway, you can use "captiveportal-login.<your domain>.com". You can also control the post-login redirect via CPPM config or in the Gateway's L3 captive portal profile. 

Are they receiving the Guest admin portal at initial redirect or after they log in? If it's at initial redirect, make sure you verify the redirect URL in the L3 Captive Portal profile. If the URL is invalid, it may try to redirect you to CPPM and the default landing page can be changed to the admin login page as your describing. 

The URL should be something like https://cppm.company.com/guest/web_page.php

Hi Michael, thanks for answering we are using a wild card certificate and the address is configured as "captiveportal-login.<your domain>.com" where yourdomain is swapped for our domain of course.

The Login method is set to controller initiated as well.

We've tried building it from the ground up again but we got the same result. 

Under your page configuration, what do you have set as your Login Method and Address? If this is a redirect by the Aruba Mobility Gateway, you should have Controller Initiated as the Method and if you're leveraging a wildcard certificate on your Gateway, you can use "captiveportal-login.<your domain>.com". You can also control the post-login redirect via CPPM config or in the Gateway's L3 captive portal profile. 

My first guess would be that the login does not happen. You could have a look at the video about Controller vs Server initiated guest workflows, and use the browser developer tools as shown in that video to go through your deployment step by step to find at which point it doesn't work.

As mentioned already, many issues are caused by not having public trusted certificates on your ClearPass and/or Controller/Gateway/AP.

Hi Herman, thanks for your response on this, we have a wildcard certificate for our domain loaded to our Aruba Central tenant and applied it to the captive portal certificate option under the security tab.

Could this be an issue as I've seen a couple of people on reddit saying wildcards are not supported ?

Does the wildcard also need to be loaded onto the Clearpass server ?

We will run through Guest video 4 and see if this helps.

My first guess would be that the login does not happen. You could have a look at the video about Controller vs Server initiated guest workflows, and use the browser developer tools as shown in that video to go through your deployment step by step to find at which point it doesn't work.

As mentioned already, many issues are caused by not having public trusted certificates on your ClearPass and/or Controller/Gateway/AP.

Wildcards are supported for captive portal, that's no issue. Make sure that you then in ClearPass point (the Address field) to captiveportal-login.your-wildcard.tld (if you have a wildcard *.your-wildcard.tld).

The ClearPass server should have a trusted HTTPS server certificate as well, which may be the same wildcard if your ClearPass has a fqdn that matches the wildcard.

Hi Herman, thanks for your response on this, we have a wildcard certificate for our domain loaded to our Aruba Central tenant and applied it to the captive portal certificate option under the security tab.

Could this be an issue as I've seen a couple of people on reddit saying wildcards are not supported ?

Does the wildcard also need to be loaded onto the Clearpass server ?

We will run through Guest video 4 and see if this helps.

My first guess would be that the login does not happen. You could have a look at the video about Controller vs Server initiated guest workflows, and use the browser developer tools as shown in that video to go through your deployment step by step to find at which point it doesn't work.

As mentioned already, many issues are caused by not having public trusted certificates on your ClearPass and/or Controller/Gateway/AP.