ruckus capitive portal win7

[s1ndr0me]

struggling with this and I cant work out why.

 

So I have a WLAN called portal (provisioning) containing a hostspot. Windows users connect but when they open the browser it doesnt redirect to the captive portal. I had it working so the help bubble would appear by the system tray announcing that additional steps may need to be taken to complete the connection. It works fine with IOS and I can access the portal by manually entering the address into the browser. It fails to open in chrome either. What else? clients pickup a wpad when they open the browser from the address the DHCP server provides so I've had to allow those ip's along with the address of the ZD to thee list of allowed sites in the walled garden.

 

Any ideas at this stage would be more than welcome. I'll be in work in a bit so can provide some more detailed info

 

pretty gutted. Damn thing is so close to being signed off.

Edited March 11, 2014 by s1ndr0me

[FN-GM]

When you try an open a browser window it should attempt to go to the home page, but instead get re-directed. Is the home page a https site?

[s1ndr0me]

Hi FN-GM

 

well I've tried setting the homepage as our internal intranet, our external website and google and it fails to redirect. The zone director captive portal is https and it's secured with our wildcard rapidSSL cert (all seems work fine).

 

I've had another little fiddle this morning. heres how the hotspot looks

 

 

and one of the WLAN it sits in

 

 

hope that helps

 

s1n

[FN-GM]

What I mean is on the laptop itself what is the home page? Is it https or http?

[s1ndr0me]

Hi again,

 

It doesnt seem to matter what the homepage is set to. http or s. or even directly typing in the address bar

 

What I have noticed tho. If I uncheck the detect automatically option it redirects straight away. I can then logon and connect to the correct WLAN but have to set the auto detect box back to auto detect. So wondering if its something to do with the wpad file.

[s1ndr0me]

made a bit of progress today. I'd missed a line in the wpad file. So now we are connecting to the portal and the browser is redirecting. We can authenticate and install the profile. The only problem now is when I switch over the to the staff WLAN i cant get out. pretty sure I am just a click away from a working wi-fi network. fingers crossed it will come together tomorrow

[truebluesteve]

made a bit of progress today. I'd missed a line in the wpad file. So now we are connecting to the portal and the browser is redirecting. We can authenticate and install the profile. The only problem now is when I switch over the to the staff WLAN i cant get out. pretty sure I am just a click away from a working wi-fi network. fingers crossed it will come together tomorrow

 

Just a note if you are using a RADIUS server to authenticate users. We had an issue where we used our smoothwall to authenticate our BYOD users - however when they went to another WLAN they could couldn't get out onto the internet although everything appeared fine. Turns out we had to set up an accounting server (also pointing to the Smoothwall box) to let it know that it had switched WLANS

[s1ndr0me]

Thanks truebluesteve, Not using radius atm, although we have set it up in the past back on a more domestic G network.

 

so this is where we are at now. Confident our wpad is working. heres how she looks

 

function FindProxyForURL(url, host) { 
   //check for local domains 
   if (dnsDomainIs(host,"bryntegcs.sch"))   {return "DIRECT";}
   if (shExpMatch(host, "cloud.*"))  {return "DIRECT";}
   if (shExpMatch(host, "simsportal.*"))  {return "DIRECT";}
   if (shExpMatch(host, "wifi.*"))  {return "DIRECT";}

   //check for short host names 
   if (isPlainHostName(host)) {return "DIRECT";} 
   
   //else return proxy 
   return "PROXY 172.21.147.2:5566"; 
}

 

The DefaultConnectionSettings key in the registry is showing http://wpad.bryntegcs.sch/wpad.dat

 

connecting to the portal the test browser is set with google as the homepage. The browser then waits for google to respond and then ends with

 

"The proxy server isnt responding

check your proxy settings 172.21.147.2:5566"

 

However when I type the address of the zonedirector using wifi.bryntegschool.co.uk it redirects me to the https activate page. I really dont want my users to have to type in the ZD address.

 

interestingly when i type the IP of the zonedirector it wont resolve. However using its internal name wifi.bryntegcs.sch and its external name wifi.bryntegschool.co.uk both do.

 

So damn close!!

[s1ndr0me]

scratch that I added

 

if (isInNet(dnsResolve(host), "172.21.0.0", "255.255.0.0"))  {return "DIRECT";}

 

which resolved the ip address. Probably a bit ham fisted but hey ho. still not working. If I kill the wpad by adding a syntax error. it redirects straight away. I think "ahhh ha fixed it" then connect to the staff WLAN and promptly can't get out.

[s1ndr0me]

ahhh ha fixed it. I simply took everything out of the walled garden except the link to the zone director. because of that it cant read the wpad file and then redirects. DISCO.

 

Happy with that I've moved onto OSX and theres a problem. Connecting to the portal brings up the OSX capitive portal. I can logon. but cant download the configuration file. Deep joy.