Environment
- SmartZone with 5.2.2.01563 Firmware version integrated with the Aruba clear pass.
- WLAN is configured with Hotspot (WISPR).
Troubleshooting
- Client devices connected to the WLAN and getting redirected to the captive portal login page.
- After users enter the credentials they get “ Database query error” on the browser.
- Same behavior observed on the different browser (Chrome/Edge/Firefox) .
- On the Clear pass >>Access Tracker we found that the client MAC address is in the encrypted format instead of its original MAC.
6. On the client-side Wireshark Packet capture , we found that the client is getting redirected to captive portal page with HTTP 302 redirect message, here as well the client mac address is in the encrypted format.
Resolution
Run the below command on the SZ CLI to disable the MAC-IP encryption for the WISPR profile.
By default, MAC-IP encryption is enabled on the SZ to enhance the security. Users MAC and IP address should not be in clear text while transporting on the internet, which will the decrease the risk of security attack.
vsz-controller-1# config
vsz-controller-1(config)# no encrypt-mac-ip
Do you want to continue to disable (or input 'no' to cancel)? [yes/no] yes
Successful operation
