Special requirements for guest SSID (WPA2 and Terms of use combined)

[Heiko Kelling]

Hi there,

we are looking for a Wifi solution in our company and are considering buying a vWLC + 18xx APs. We have a special requirement for guest WiFi. Our boss wishes the following registration for guests:

1.Client connects to the SSID and has to enter a WPA (2) key.
2. Then he is forwarded to a captive portal where the terms of use must accept (it would also be sufficient if he only saw the terms of use and did not have to accept them)
3. Then he can surf the Internet.

Is that possible with controller only. 

[Sandeep Choudhary]

It can be done.

Create a wlan with WPA2/PSK and then use layer 3 security as Authentication.

Regards

Dont forget to rate helpful posts

[service-md]

Thank you. We now have a test system. We created an SSID with a PSK and Layer 3 Security as recommended. Now there is a very strange behavior:

-Old Blackberry OS10 device works great
-Windows 10 laptop works great
-Android 9 smartphone does not work (device tries to redirect to the portal without success)
-Ipad current iOS does not work (device tries to redirect to the portal without success)

I activated "Cipher Option High" in the controller, no change.

Another question: Is a portal possible without a certificate? Otherwise, guests always receive the certificate warning.

[patoberli]

What IP address did you choose for the virtual interface? I hope it's not a public one like 1.1.1.1?

[service-md]

Yes. It's default 1.1.1.1