HP MSM 760 Proxy Settings

[MajidAmater]

I have a slight problem in that our web browsers need to be configured to use a proxy server before they can access the internet.

This is okay for normal users on the network as we can configure the settings, however I want to make wireless available for guset users and I would like them to be automatically directed to the web proxy. Additionally we have some devices such as Ipods on which we can't configure proxy settings. We use these in classrooms for children and are unable to access internet.

Any idea how I can configure it to do this?

I am using a HP MSM 760 and  HP MSM 710.

[Arimo]

Hi

Check the configuration guide, look for "Zero configuration" :)

[njbignell]

This is how the config guide explains it;

HTTP/HTTPS proxy: Enable this option to allow the controller to support client stations that
use application software (such as a web browser) configured to use a proxy server for
HTTP and HTTPS, without reconfiguration of the application software.

Wouldn't that mean 'if the users has a proxy configured in (e.g) IE, ignore it'?

I think what he's trying to do (and myself) is allow someone that has no proxy configured to walk in and use the internet without having to type that proxy in...

[Evan_ISS]

---

@njbignell wrote:

I think what he's trying to do (and myself) is allow someone that has no proxy configured to walk in and use the internet without having to type that proxy in...

---

To accomplish what you want you will need to use a fairly obscure feature of the MSM products called Upstream Proxy, see here for configuration details:

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&taskId=120&prodSeriesId=3963981&prodTypeId=12883&prodSeriesId=3963981&objectID=c02983049

We use the feature to redirect Guest traffic at our clients' sites that use proxies.

A few warnings:

Zero configuration has never worked with HTTPS for us (up to 5.7.0.3, we haven't tested with 5.7.1).

If using HTML logins for guest access HTTPS redirects fine , albeit slowly.

Software version 5.7.1 has introduced a fresh issue re guest access with httpproxy and PublicAccessUser status table errors that hinder access, if you are on that version you will need to wait for the errors to clear and then access is restored (don't assume your configuration is wrong if it takes a while to respond). We have a Case open with HP re the matter.

Hope the above helps.

[Pete W]

Do you know whether the Upstream Proxy feature works with https?

Regards,

Pete

[Evan_ISS]

---

@Pete W wrote:

Do you know whether the Upstream Proxy feature works with https?

---

We have been asked to configure Guest Access in two ways until now for sites with proxy servers for internet access: MAC authentication and HTML Logins.

With MAC auth, If I remember correctly, when a proxy isn't set in the client's browser settings HTTPS doesn't work, when one is, it does (you will have to have a proxy in your Guest network mind you) but that obviously completely misses the point of having guests just using the internet without having to go through configuration steps.

WIth HTML logins, HTTPS works fine but is slow (we haven't yet figured out why and frankly we don't plan to, it just works).

As per my previous post, there are still unresolved issues with httpproxy and PublicAccessUser status table errors that we have been told by HP are being worked on and fixes will appear in an updated 5.7.1 release.

Hope the above helps.

[Colin_Airpass]

i have just created a post for a related issue.

http://h30499.www3.hp.com/t5/MSM-Series/MSM7xx-HTTP-UPSTREAM-PROXY-amp-DNAT-Server-problems/m-p/5946405#M1734

do you think that my issues are related and might be  affected/rectified by the promised fixes?

thanks in advance.

C.

[Colin_Airpass]

just checked the release notes for 5.7.2.0 and in the known issues at the end of the document is (still).....
The controller ignores the values configured for the Primary-DNAT-Server RADIUS attribute.

Is 5.7.1.0 improved over 5.7.0.3?

[Evan_ISS]

---

@Colin_Airpass wrote:

just checked the release notes for 5.7.2.0 and in the known issues at the end of the document is (still).....
The controller ignores the values configured for the Primary-DNAT-Server RADIUS attribute.

Is 5.7.1.0 improved over 5.7.0.3?

---

Hi there,

I just looked at one of our sites with a MSM760 on 5.7.2.0 and I can't see that attribute (Primary-DNAT-Server RADIUS) listed in Public Access -> Attributes (unless I am missing something).

Guest access using the HTTP Proxy feature works (mostly) as expected, except for the issues detailed in my previous post that still haven't been resolved in 5.7.2.0.

Also (referring to your other thread) support is usually full of the brown stuff as there is some guidance (albeit small and incomplete) at the URL I posted in one of my earlier contributions to this thread.

Edit: Grammar.

[Colin_Airpass]

Gonna throw 5.7.0.2 on a bench controller this afternoon and have a go.

Thanks for your comments.

I did actually manage to get some info from an old friend within HP that confirms our config as being correct, it was very much the same as the info in the link you posted with (mainly) presentational differences.

All very helpful.

Thanks again.