Redirect URLS BYOD Network?

[FN-GM]

Hello,

 

Using our Cisco Kit we want to make a BYOD VLAN. The idea is they get access to the school website, VLE, Webmail and our remote access webpage. They can use the remote access then to access the LAN.

 

I was wondering what i can use so if on this network they navigate to say google.com it redirects them to a specific webpage?

 

Hopefully something that wont cost us anything extra.

 

I hope this make sense?

 

Thanks

[FN-GM]

BUMP please :)

[cpjitservices]

If this was me, I'd build the new VLAN and just allow the firewall rules on the wireless to only those specific services, if they want access to the LAN then you either have to VPN in or use the Captive Portal to authenticate.

 

In fact we do just the thing using PfSense, our wireless is wide open, but you cant actually access any service until you login through the captive portal. Once you've done that you can access certain sites like our Business Portal, OWA and thats it.... if you want Internet and LAN Services you have to VPN in.

 

So if you wanted google.com to point to a different page you could do it so a rule would send those requests to another server....

 

All free - cost us a spare machine....

Edited November 13, 2012 by cpjitservices

[cpjitservices]

Although upon reading your post again that wasn't what you asked for was it... durrrrr!

 

Maybe you could point a firewall rule in there so if google.com is requested then it will forward the traffic to a different site/server.

[twin--turbo]

create a service landing page that you tell the students the url.

 

setup access lists on the cisco to only allow trafic to the desired hosts and ports.

[FN-GM]

All i am after at the moment is a way to take them automatically to the landing page.

 

Thanks

[FN-GM]

you could edit the HOSTS file to do this ?

 

On what device? Thanks

[cpjitservices]

Yeah your right you couldn't do the HOSTS file as these are mobile devices, access lists / firewalling is gonna be the easiest way I wreckon.

[FN-GM]

I know about access lists etc that isnt the problem.

 

I want something that will redirect the student home pages to our specificed URL. Like it is in airports etc. For example bob smith opens IE and he goes to google.com it then takes them instead of Google to our URL.

[TechMonkey]

That would be down to your Wireless infrastructure. They do the captive page type doo hickys (sorry for the technical terms). I'll have a look for what it is called on Ruckus but if you have something different it could well be renamed!

 

EDIT: Sorry by Wireless Infrastructure I mean either the access points or management system!

[cpjitservices]

Captive Portal for authentication.... exactly what we use here!

[cpjitservices]

Captive portal - Wikipedia, the free encyclopedia

[FN-GM]

Yes but what actual product to use, capitve protal itself isnt a product. I dont want a firewall becuase we have one of them.

 

Thanks

Edited November 13, 2012 by FN-GM

[cpjitservices]

You could use PfSense it's free off the internet and serves as a Router / Firewall - all you'll need is a spare machine or build it in a VM

 

pfSense Open Source Firewall Distribution - Home

 

We swear by it and have installed it at some local hotspots... works flawlessly.

 

You dont actually have to use the firewall part,,, infact it can be disabled all together in the advanced settings.

 

PfSense is also built on BSD and has a very nice Web Interface, with it being BSD it's very secure.

Edited November 13, 2012 by cpjitservices

[cpjitservices]

Captive Portal - PFSenseDocs

[TechMonkey]

Is it not part of your current Wireless management?

[FN-GM]

Is it not part of your current Wireless management?

 

not quite how we want it. Plus we want to make it available via cable as well.

[twin--turbo]

I have been working on this for the last couple of days on and off.

 

I initialy was going to use our Meru captive portal, until i discovered that it only supports one portal despite supporting 4 landing pages and 4 networks ( so even if you have a landing page associated with one ssid, the pupils can just use their user to connect to the other guest SSID !!!GREAT!!! )

 

So I had a quick play on a test SLES box and had some issues, so tried ClearOS and had some issues....

 

So tomorrow is "Untangle" day, and if that does not work without hacking then i will give pFsense a go.

 

 

 

What you need to do is have captive portal and have the success page forward to your internal landing page.

 

When the user connects to the network the portal (which must either be a transparent bridge or the default gateway ) intercepts the web traffic, whatever you go to it displays a logon page, once logged on you get the success page that can redirect to your landing page.

[FN-GM]

Thats exactly what i want. Thanks

[FN-GM]

Does PFSense captive portal need to use a username and password? I dont want to use that, i just want it to redirect.

 

Do you set PFSense as your default gateway?

[twin--turbo]

DG or better a transparent bridge. Has to be one of the two so that all traffic hits it.

 

Rob

[twin--turbo]

Once I have it working our users pupils will hit the portal, accept the AUP and then be connected to our VDI login page.

 

The only thing they can do is hit that, no other ports will work, no other websites will work, ( that's the Cisco access lists job )

 

We already have the second part in force for our IPAD wifi for Zone Leaders.

 

Rob

[FN-GM]

If its the DG how can the clients route to another VLAN like get to our remote access solution hosted on another VLAN? Thanks

[twin--turbo]

I think it's diagram time....

 

Rob

[FN-GM]

I suppose its kind of like this? - http://www.edugeek.net/forums/wired-networks/104166-using-smoothwall-express-cisco-layer-3-switch.html