cisco wlc 5520 and external Captive portal

[kol1b6]

Hello to all!

I apologize in advance for bad english ...

I would like to know if someone faced this problem: there is cisco wlc 5520 8.2.141 and external captive portal.

we are trying to set up this bundle so that the client ONCE is transferred to the authorization page.

that is, the guest comes. connects to the network. it throws on the authorization page. The client enters the password from SMS and that's it.  

we want either the user session to never end, or the WLC to keep the client’s mac address and simply pass the client when it comes back to us again, without showing the captive portal again.

Is it even possible to customize it? or is there a workaround, for example to transfer the user using mikrotik equipment?

[patoberli]

Yes that is possible. The thing is, for this you configure nothing on the WLC and everything on the captive portal. The captive portal will decide if the client has access or not and will then permit the client through its firewall or not. On the WLC you simply set the gateway address of the VLAN to the captive portal. The portal should also do DHCP and DNS for simplified management.

Please note, the SSID will then be unencrypted!

I have seen solutions where the client gets sent a password for another SSID which is encrypted, but that is a tad more complicated.

[kol1b6]

Thank you so much for your reply!

Unfortunately, I’m not sure if this is real, as this is a captive portal cloud provider.
this is global-hotspot.ru (if links are allowed here)

they provide a web-page, radius server and send SMS.
I do not think that it is possible to configure the VLAN gateway on them

[patoberli]

I assume you have already checked this? https://global-hotspot.ru/настройка-hotspot-captive-portal-на-cisco-wlc-в-режиме-controller-ap/
I don't understand Russian, but based on that information they have a manual for the Cisco WLC.

And I think you have to follow this guide here for the external webauth portal:
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/115951-web-auth-wlc-guide-00.html#anc11