OAW 4550 - Release 6.4.2.3 - Captive Portal with WPA2-PSK

[alf]

Hello,

i have to configure captive portal with additional wpa2-psk.

If create the ssid with wizard, then i changed from open to wpa2-psk i get the error:

Error processing command 'wlan ssid-profile "ssid-guest" opmode wpa2-psk-aes':Error: dot1x profile needs to be enabled in aaa profile "aaa_guest" to support opmode "wpa2-psk-aes" configured in ssid profile "ssid-guest"

So i have added 802.1x profile "default-psk" to "aaa_guest", the error was solved... but if a client connects to ssid-guest there is no psk popup and i cant connect to ssid.

I have to configure another parameters or is it not possible?

Regards,
Alf

[silvio]

Hi Alf,
your wished config is possible. I'm not sure where your issue is (I have to look into your config by myself). I think it's a wrong initial userrole in the aaa Profile - but it depend if you use PEFNG or not.

So try the following (and delete your config...)
First make a "normal" setup for a SSID with PSK (I don't like the wizzard for it). If this works than you can add the necessary config for CP. The role of the users after psk-login has to have the same config like guest-logon (Firewall-policies and cp-association).

hope that will help you.
greats from saxony
Silvio

[alf]

Thank you Silvio,

now its working fine!