Captive Web Portal with external authentication

  • 1
  • Question
  • Updated 3 years ago
We are developing a guestmanager where the user can create guestpasses, change lay-out of guest pass, change lay-out of CWP, send text guestpass with SMS/email,...

But we don't get the CWP with external authentication to work. Can someone help us?

Below you can find some printscreens:

Configuration:


CWP Configuration:


Form code:

Error message:
Photo of Jonas Dekkers

Jonas Dekkers

  • 152 Posts
  • 29 Reply Likes

Posted 3 years ago

  • 1
Photo of Jonas Dekkers

Jonas Dekkers

  • 152 Posts
  • 29 Reply Likes
Can no body help me with this?
Photo of Dawn Douglass

Dawn Douglass

  • 67 Posts
  • 3 Reply Likes
Exactly where is the process failing?  When you test connectivity to the external radius server do you get a passing result?  What does client monitor tell you?  Does infoggen miskult mean authentication failure?
Photo of AJ Nurcombe

AJ Nurcombe

  • 11 Posts
  • 1 Reply Like
This looks like a RADIUS reject after we pass the credentials to your external radius server. What is happening in your RADIUS logs?
Photo of Jonas Dekkers

Jonas Dekkers

  • 152 Posts
  • 29 Reply Likes
Now it's working. I changed the authentication method to "MS-chap V2". Thanks for the help
(Edited)
Photo of Nick Lowe

Nick Lowe, Official Rep

  • 2491 Posts
  • 451 Reply Likes
That's an issue at your RADIUS server then. You need to check there what's wrong with its configuration.

PEAP with MS-CHAP-v2 as the inner isn't the same as plain MS-CHAPv2.
If you are using NPS, you need to check what you are doing with your Connection Request Policy and, potentially depending on configuration, your subsequent Network Policy.
Photo of Jonas Dekkers

Jonas Dekkers

  • 152 Posts
  • 29 Reply Likes
Is there a way to limit the session time per user (or at least by user group/profile) on the captive web portal?

We need to create guestpass for different time periods (1 hour, 3 hours, 1 weeks, 5 weeks, 2 months,...). The person who create the guest pass need to choose how long the guest pass will be valid. I think Id manager, Clearpass, cloud4wi,... also work like this. Do you know how they achieve that?