Setting UP Captive Portal ON 5508 WLC

[okoroji80]

Dear All,

I do know that captive portal could be setup on cisco 5508, such that internet users could login as follows:

Username, password , login duration  etc.

however i would like to know whether the above configuration would work with just 5508 and MS Active directory.or do we need any other device to achieve this.

secondly can we upload a customised login web page from which users can login and gain access to the internet ?

Jude.

[David Watkins]

1. i would like to know whether the above configuration would work with just 5508 and MS Active directory

Yes, you would need to configure an LDAP server on the WLC pointed to your MS AD, binding properly.  Then, make sure your L3 authentication priority is configured to query LDAP first.  This works pretty well in a L3 web-auth scenario, but is limited when using LOCAL EAP

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080a03e09.shtml

2. can we upload a customised login web page from which users can login and gain access to the internet ?

Yes; start by downloading the webauth_bundle.zip for your respective release/platform. 

http://www.cisco.com/en/US/docs/wireless/controller/7.0MR1/configuration/guide/cg_user_accts.html#wp1049404

[Gateway Church]

Would this be the correct direction to go for a Guest Captive Portal at this point?

[Scott Fella]

Explain more on what you are trying to achieve. Portal pages are really meant for guest access, but not always used for that purpose.  I have had created portal pages tied to AD credentials for customer specific purposes.  However, I have used Radius servers like NPS to do this. This way I can determine what groups can use their AD credentials to access the wireless through a portal.  

-Scott

*** Please rate helpful posts ***

[Scott Fella]

If you just want to try using LDAP, then here is a guide that can help. I have always used radius for this and never used LDAP, but that's me:)

http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/108008-ldap-web-auth-wlc.html

-Scott

*** Please rate helpful posts ***