Show commands

show captive-portal profile

(config)# show captive-portal profile

 Captive Portal Profile Configuration
  Name : use-radius-vsa
  Type : predefined
  URL  :
  
  Name : myCaptivePortalProfile
  Type : custom
  URL  : http://mycppm.local/guest/captive_portal_login.php

show user-role

Switch# show user-role 

 User Roles

  Enabled      : <Yes/No>
  Initial Role : denyall

  Type          Name
  ----------    ------------
  local         Employee
  local         Guest
  predefined    denyall

show user-role <ROLE-NAME>

Switch# show user-role captivePortalwithVSA

User Role Information

Name                              : captivePortalwithVSA
  Type                              : local
  Reauthentication Period (seconds) : 0
  Untagged VLAN                     : 610
  Captive Portal Profile            : use-radius-vsa
  Policy                            : cppolicy

show user-role detailed

The example shows how to configure user roles to use Clearpass as a Captive Portal. The Captive Portal URL is specified in a RADIUS VSA.

Switch# show user-role captivePortalwithVSA detailed

User Role Information
   Name                              : captivePortalwithVSA
   Type                              : local
   Reauthentication Period (seconds) : 0
   VLAN                              : 610
   Captive Portal Profile            : use-radius-vsa
     URL                             : (use RADIUS VSA)
   Policy                            : cppolicy

Statements for policy "cppolicy"
policy user "cppolicy"
     10 class ipv4 "cppm" action permit
     20 class ipv4 "steal" action redirect captive-portal
     30 class ipv4 "other" action permit
   exit

Statements for class IPv4 "cppm"
class ipv4 "cppm"
     10 match tcp 0.0.0.0 255.255.255.255 1.0.9.15 0.0.0.0 eq 80
     20 match tcp 0.0.0.0 255.255.255.255 1.0.9.15 0.0.0.0 eq 443
   exit

Statements for class IPv4 "steal"
class ipv4 "steal"
     10 match tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 80
     20 match tcp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 443
   exit

Statements for class IPv4 "other"
class ipv4 "other"
     10 match udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 53
     20 match udp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255 eq 67
     30 match icmp 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
   exit

show port-access clients

Port Access Client Status

Port  Client Name   MAC Address   IP Address      User Role       Type VLAN
----- ------------- ------------- --------------- -------------------- ------
1/A18 001517581ec4  001517-581ec4 10.108.1.201    ixia1           MAC   108
A7                  000c29-5121fc n/a             denyall         LOCAL
A8                  000c29-d12996 n/a             myrole          LOCAL 42

show port-access clients detailed

Switch (config)# show port-access clients detailed

 Port Access Client Status Detail
  Client Base Details :
   Port            : 1/A18                 Authentication Type : mac-based
   Client Status   : authenticated         Session Time        : 11 seconds
   Client Name     : 001517581ec4          Session Timeout     : 60 seconds
   MAC Address     : 001517-581ec4
   IP              : 10.108.1.201

 User Role Information
   Name                              : ixia1
   Type                              : local
   Reauthentication Period (seconds) : 60
   Untagged VLAN                     : 108
   Tagged VLANs                      :
   Captive Portal Profile            :
   Policy                            : policyIxia1

Statements for policy "policyIxia1"
policy user "policyIxia1"
     10 class ipv4 "classIxia1" action rate-limit kbps 11000
   exit

Statements for class IPv4 "classIxia1"
class ipv4 "classIxia1"
     10 match ip 0.0.0.0 255.255.255.255 0.0.0.0 255.255.255.255
   exit