Web Authentication and J9001A wireless module

[Tony Flannery]

Hi,

I am trying to use Web Authentication for my Wireless clients using a J9001A module in a 5308 Procurve switch. I have created the WLAN and tied it to a vlan on my switch, and it works fine with no authentication. However, when I try to activate the Web Authentication option for the WLAN, I don't get the authentication login options, and internet access for the client is disabled. I am assuming that the login prompt should appear once Web authentication is selected but for some reason my client station does not get the login page. I have installed and tested a Radius server, but still no luck. Any idea where I should start troubleshooting ?

Thanks,

Tony.

[Jason Luckett]

Hi Tony,

Have you tried looking into the Allow list, as when a user associates with a WLAN that is configured for Web-Auth, the userâ s station cannot, " BY DEFAULT ", access any device until the user authenticates to the RADIUS server.

The station must be able to access the Wireless Edge Services xl Module(WESM).

To enable this access, you must
add the moduleâ s IP address to the Web-Auth Allow list.

I hope this helps, but if you have any further questions just post a reply.

Regards,

Jase

[Tony Flannery]

Thanks Jason,

I do have the modules ip in the allowed list, and I can ping the module from a wireless workstation, but no login screen.

Tony.

[Jason Luckett]

Hi Tony,

Sorry I have not replied before now I have been really busy.

Another thing for you to look into is the allocation of IP addresses, as the mobile machine will not move into the WEB Authentication state, until it has completed the following.

1, Allocation of a correct IP address from a DHCP server, that is linked to the network.

2, Association with the correct SSID for the WLAN.

Once these phases are complete then the Mobile user can open a web browser and enter a URL, which should then be redirected to the login page for WEB Auth.

I hope this helps,

Jase

[Tony Flannery]

Thanks Jase,

I can get the web authentication page to come up now, but only if the Web authentication WLAN is associated with vlan1, and the wireless module has an address in the same range as vlan1. If I try to associate a WLAN with a different vlan, the web page never appears, even though the client gets an ip address and can even ping the module. It seems to be some kind of routing or gateway issue.

Tony

[Brook Miller]

I had a similar problem, and was only able to get the web auth page when I took out the default route entry I had added in the wesm card.

Also, there seems to be a fix on web-auth in the 1.0.5 release

[Tony Flannery]

Thanks Brook,

I'm gonna live with what I've got at the moment, restricted to the default vlan. I can use Identity Manager to apply acls to the wireless users as they log in to ensure security. I currently have the latest software release installed

Tony.

[Helder Afonso]

It´s easy to solve your problem,
on the new VLAN give an IP, and it will work fine.

Helder

[Tony Cuevas]

I have this same exact issue, but running 2.12 code. once i move the WLAN to Vlan 1...the Web Auth works. When i move the WLAN back to VLAN 104, the web-auth fails. the client gets an Ip Address for VLAN 104 though.