Summary of experience of H3C wireless controller portal supporting https redirection

Problem phenomenon

Https website is becoming more and more popular, and some customers reported that https could not be redirected successfully under portal.

After opening the DNS address, mobile phones, notebook terminals, browsers input IP addresses and http domain names can be redirected normally, while entering HTTPS domain names, such as https://www.baidu.com/, cannot trigger portal redirection, resulting in customer complaints.

Solution

(1) V5: (supported by R2509P52 and later versions)

Configure ssl server-policy first

Ssl server-policy xxx

And then associate it with portal https-redirect.

Portal https-redirect server-policy xxx

Ssl server-policy content can be empty, V5 comes with a self-signed certificate. However, if there is a problem with the security certificate, click "continue browsing".

(2) V7:

It can be used without configuration by default, using the built-in ssl policy, self-signed certificate.

There will also be an alarm prompt for problems with the same security certificate as V5, click to continue browsing

If the customer resents this article, configure the following fixed-name SSL policy and import the certificate provided by the customer.

The portal module automatically references https_redirect.

Ssl server-policy https_redirect-note that this is a fixed name

However, for local forwarding, it depends on the AP, as shown below:

Https redirection is not supported when forwarding AP locally in 128m memory.

AP redirection is supported for local forwarding of 256m and above memory.

Experience summary

No matter V5 or V7 Glory https redirection does not import the license applied by specialized agencies, a certificate alarm will appear in the browser.