Captive portal with authentication server

charlasa · Nov 8, 2023, 9:50 AM

Hi,

We are currently using the captive portal feature, with a Radius authentication server. Everything is working fine, but we know that Mschapv2 without Eap is obsolete and is considered unsecured.

We are wondering if it could be more secured to use an LDAPS authentication server instead ? We use 802.1X for on premise devices, but we have to use the captive portal feature for our byod network.

Thanks

yanqian · Nov 9, 2023, 1:18 AM

Yes, you can use LDAPS authentication.
You need to add LDAP authentication server in System / User manager / Authentication servers, select "SSL/TLS encrypted" in Transport option.
You may test it using Diagnostics / Authentication.
Then select the LDAP server you added in your captive portal settings (Authentication Server).

As I recall, if I use Domain\Username or Username@Domain as user in CP login page, it will fail, but use only "Username" will be OK.