Security

Hi all,

I am implementing web logins with Active Directory but I faced this issue where I cannot get internet access after pressing login on the captive portal because of authentication failure. I configured two services, one for pre-auth and another one is guest service with mac caching but the request only hit the pre-auth service. I attached the error message along with my configuration.

Do you see anything in Access Tracker related to that authentication? Can you share that output if it is there, including the Alerts tab?

Hi all,

I am implementing web logins with Active Directory but I faced this issue where I cannot get internet access after pressing login on the captive portal because of authentication failure. I configured two services, one for pre-auth and another one is guest service with mac caching but the request only hit the pre-auth service. I attached the error message along with my configuration.

Hi Herman, the request is getting hit on the authentication service and the status is successful but there is no hit on the guest access service with mac caching.

Do you see anything in Access Tracker related to that authentication? Can you share that output if it is there, including the Alerts tab?

Hi all,

I am implementing web logins with Active Directory but I faced this issue where I cannot get internet access after pressing login on the captive portal because of authentication failure. I configured two services, one for pre-auth and another one is guest service with mac caching but the request only hit the pre-auth service. I attached the error message along with my configuration.

Then there may be something wrong with the AP/controller certificate (if you deployed the portal on WLAN), or the configuration in your guest flow, or the configuration on the AP/controller/switch.
What may help is the following video, explaining all the steps in captive portal guest, and/or run a network trace of all the request in your browser (developer tools) to see what the browser tries to do, if it can reach the controller/AP to post the credentials, and check the process step by step.

Hi Herman, the request is getting hit on the authentication service and the status is successful but there is no hit on the guest access service with mac caching.

Do you see anything in Access Tracker related to that authentication? Can you share that output if it is there, including the Alerts tab?

Hi all,

I am implementing web logins with Active Directory but I faced this issue where I cannot get internet access after pressing login on the captive portal because of authentication failure. I configured two services, one for pre-auth and another one is guest service with mac caching but the request only hit the pre-auth service. I attached the error message along with my configuration.

I think my controller configurations and my service configuration is okay because I used the same configuration for my self-registration and it works. I suspect it is because of my pre-auth configuration. I am not quite sure the flow of the service what is need to configure on the service

Then there may be something wrong with the AP/controller certificate (if you deployed the portal on WLAN), or the configuration in your guest flow, or the configuration on the AP/controller/switch.
What may help is the following video, explaining all the steps in captive portal guest, and/or run a network trace of all the request in your browser (developer tools) to see what the browser tries to do, if it can reach the controller/AP to post the credentials, and check the process step by step.

Hi Herman, the request is getting hit on the authentication service and the status is successful but there is no hit on the guest access service with mac caching.

Do you see anything in Access Tracker related to that authentication? Can you share that output if it is there, including the Alerts tab?

Hi all,

I am implementing web logins with Active Directory but I faced this issue where I cannot get internet access after pressing login on the captive portal because of authentication failure. I configured two services, one for pre-auth and another one is guest service with mac caching but the request only hit the pre-auth service. I attached the error message along with my configuration.

Hi, can you try without the Preauth Check to see if it hits any service? That might give us a clue how to move forward

I hope this helps

I think my controller configurations and my service configuration is okay because I used the same configuration for my self-registration and it works. I suspect it is because of my pre-auth configuration. I am not quite sure the flow of the service what is need to configure on the service

Then there may be something wrong with the AP/controller certificate (if you deployed the portal on WLAN), or the configuration in your guest flow, or the configuration on the AP/controller/switch.
What may help is the following video, explaining all the steps in captive portal guest, and/or run a network trace of all the request in your browser (developer tools) to see what the browser tries to do, if it can reach the controller/AP to post the credentials, and check the process step by step.

Hi Herman, the request is getting hit on the authentication service and the status is successful but there is no hit on the guest access service with mac caching.

Do you see anything in Access Tracker related to that authentication? Can you share that output if it is there, including the Alerts tab?

Hi all,

I am implementing web logins with Active Directory but I faced this issue where I cannot get internet access after pressing login on the captive portal because of authentication failure. I configured two services, one for pre-auth and another one is guest service with mac caching but the request only hit the pre-auth service. I attached the error message along with my configuration.

Hello, it hit the radius service, "Guest with Mac Caching" from the template but the same error still appears

Hi, can you try without the Preauth Check to see if it hits any service? That might give us a clue how to move forward

I hope this helps

I think my controller configurations and my service configuration is okay because I used the same configuration for my self-registration and it works. I suspect it is because of my pre-auth configuration. I am not quite sure the flow of the service what is need to configure on the service

Then there may be something wrong with the AP/controller certificate (if you deployed the portal on WLAN), or the configuration in your guest flow, or the configuration on the AP/controller/switch.
What may help is the following video, explaining all the steps in captive portal guest, and/or run a network trace of all the request in your browser (developer tools) to see what the browser tries to do, if it can reach the controller/AP to post the credentials, and check the process step by step.

Hi Herman, the request is getting hit on the authentication service and the status is successful but there is no hit on the guest access service with mac caching.

Do you see anything in Access Tracker related to that authentication? Can you share that output if it is there, including the Alerts tab?

Hi all,

I am implementing web logins with Active Directory but I faced this issue where I cannot get internet access after pressing login on the captive portal because of authentication failure. I configured two services, one for pre-auth and another one is guest service with mac caching but the request only hit the pre-auth service. I attached the error message along with my configuration.

Hi I use the default configurations for this, would this be a concern?

Original Message:
Sent: Apr 09, 2023 09:59 PM
From: aniqzumarziyad
Subject: Web Logins Authentication Failure

Hello, it hit the radius service, "Guest with Mac Caching" from the template but the same error still appears

Original Message:
Sent: Apr 06, 2023 08:21 AM
From: ulises.cazares
Subject: Web Logins Authentication Failure

Hi, can you try without the Preauth Check to see if it hits any service? That might give us a clue how to move forward

I hope this helps

Original Message:
Sent: Apr 06, 2023 04:35 AM
From: aniqzumarziyad
Subject: Web Logins Authentication Failure

I think my controller configurations and my service configuration is okay because I used the same configuration for my self-registration and it works. I suspect it is because of my pre-auth configuration. I am not quite sure the flow of the service what is need to configure on the service

Original Message:
Sent: Apr 06, 2023 04:01 AM
From: Herman Robers
Subject: Web Logins Authentication Failure

Then there may be something wrong with the AP/controller certificate (if you deployed the portal on WLAN), or the configuration in your guest flow, or the configuration on the AP/controller/switch.
What may help is the following video, explaining all the steps in captive portal guest, and/or run a network trace of all the request in your browser (developer tools) to see what the browser tries to do, if it can reach the controller/AP to post the credentials, and check the process step by step.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

Original Message:
Sent: Apr 06, 2023 12:16 AM
From: aniqzumarziyad
Subject: Web Logins Authentication Failure

Hi Herman, the request is getting hit on the authentication service and the status is successful but there is no hit on the guest access service with mac caching.

Original Message:
Sent: Apr 05, 2023 05:13 AM
From: Herman Robers
Subject: Web Logins Authentication Failure

Do you see anything in Access Tracker related to that authentication? Can you share that output if it is there, including the Alerts tab?

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

Original Message:
Sent: Apr 05, 2023 04:25 AM
From: aniqzumarziyad
Subject: Web Logins Authentication Failure

Hi all,

I am implementing web logins with Active Directory but I faced this issue where I cannot get internet access after pressing login on the captive portal because of authentication failure. I configured two services, one for pre-auth and another one is guest service with mac caching but the request only hit the pre-auth service. I attached the error message along with my configuration.

Hi I use the default configurations for this, would this be a concern?

Original Message:
Sent: Apr 09, 2023 09:59 PM
From: aniqzumarziyad
Subject: Web Logins Authentication Failure

Hello, it hit the radius service, "Guest with Mac Caching" from the template but the same error still appears

Original Message:
Sent: Apr 06, 2023 08:21 AM
From: ulises.cazares
Subject: Web Logins Authentication Failure

Hi, can you try without the Preauth Check to see if it hits any service? That might give us a clue how to move forward

I hope this helps

Original Message:
Sent: Apr 06, 2023 04:35 AM
From: aniqzumarziyad
Subject: Web Logins Authentication Failure

I think my controller configurations and my service configuration is okay because I used the same configuration for my self-registration and it works. I suspect it is because of my pre-auth configuration. I am not quite sure the flow of the service what is need to configure on the service

Original Message:
Sent: Apr 06, 2023 04:01 AM
From: Herman Robers
Subject: Web Logins Authentication Failure

Then there may be something wrong with the AP/controller certificate (if you deployed the portal on WLAN), or the configuration in your guest flow, or the configuration on the AP/controller/switch.
What may help is the following video, explaining all the steps in captive portal guest, and/or run a network trace of all the request in your browser (developer tools) to see what the browser tries to do, if it can reach the controller/AP to post the credentials, and check the process step by step.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

Original Message:
Sent: Apr 06, 2023 12:16 AM
From: aniqzumarziyad
Subject: Web Logins Authentication Failure

Hi Herman, the request is getting hit on the authentication service and the status is successful but there is no hit on the guest access service with mac caching.

Original Message:
Sent: Apr 05, 2023 05:13 AM
From: Herman Robers
Subject: Web Logins Authentication Failure

Do you see anything in Access Tracker related to that authentication? Can you share that output if it is there, including the Alerts tab?

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.

Original Message:
Sent: Apr 05, 2023 04:25 AM
From: aniqzumarziyad
Subject: Web Logins Authentication Failure

Hi all,

I am implementing web logins with Active Directory but I faced this issue where I cannot get internet access after pressing login on the captive portal because of authentication failure. I configured two services, one for pre-auth and another one is guest service with mac caching but the request only hit the pre-auth service. I attached the error message along with my configuration.

Hi I use the default configurations for this, would this be a concern?

Hello, it hit the radius service, "Guest with Mac Caching" from the template but the same error still appears

Hi, can you try without the Preauth Check to see if it hits any service? That might give us a clue how to move forward

I hope this helps

I think my controller configurations and my service configuration is okay because I used the same configuration for my self-registration and it works. I suspect it is because of my pre-auth configuration. I am not quite sure the flow of the service what is need to configure on the service

Then there may be something wrong with the AP/controller certificate (if you deployed the portal on WLAN), or the configuration in your guest flow, or the configuration on the AP/controller/switch.
What may help is the following video, explaining all the steps in captive portal guest, and/or run a network trace of all the request in your browser (developer tools) to see what the browser tries to do, if it can reach the controller/AP to post the credentials, and check the process step by step.

Hi Herman, the request is getting hit on the authentication service and the status is successful but there is no hit on the guest access service with mac caching.

Do you see anything in Access Tracker related to that authentication? Can you share that output if it is there, including the Alerts tab?

Hi all,

I am implementing web logins with Active Directory but I faced this issue where I cannot get internet access after pressing login on the captive portal because of authentication failure. I configured two services, one for pre-auth and another one is guest service with mac caching but the request only hit the pre-auth service. I attached the error message along with my configuration.

You should upload a trusted certificate to your controller, assign it for captive portal use, and configure the fqdn for that certificate instead of securelogin.arubanetworks.com in the screenshot from the Guest Login page. Check the the videos that I shared earlier on why and how.

Hi I use the default configurations for this, would this be a concern?

Hello, it hit the radius service, "Guest with Mac Caching" from the template but the same error still appears

Hi, can you try without the Preauth Check to see if it hits any service? That might give us a clue how to move forward

I hope this helps

I think my controller configurations and my service configuration is okay because I used the same configuration for my self-registration and it works. I suspect it is because of my pre-auth configuration. I am not quite sure the flow of the service what is need to configure on the service

Then there may be something wrong with the AP/controller certificate (if you deployed the portal on WLAN), or the configuration in your guest flow, or the configuration on the AP/controller/switch.
What may help is the following video, explaining all the steps in captive portal guest, and/or run a network trace of all the request in your browser (developer tools) to see what the browser tries to do, if it can reach the controller/AP to post the credentials, and check the process step by step.

Hi Herman, the request is getting hit on the authentication service and the status is successful but there is no hit on the guest access service with mac caching.

Do you see anything in Access Tracker related to that authentication? Can you share that output if it is there, including the Alerts tab?

Hi all,

I am implementing web logins with Active Directory but I faced this issue where I cannot get internet access after pressing login on the captive portal because of authentication failure. I configured two services, one for pre-auth and another one is guest service with mac caching but the request only hit the pre-auth service. I attached the error message along with my configuration.