[Kea-users] Captive Portal Using Kea DHCP.

[Taylor, Preston]

RFC8910 as written (and as implemented by Apple) is not for providing a captive portal URL but rather for providing a URL for an API the client can query to get captive status and other info. It’s not as simple as just putting your captive URL there. While this is implemented by Apple it is very new (as RFCs go) and still in flux as to implementation and you won't find many software vendors who support the API yet.

You’ll be much better off with the classic method of sending HTTP 302 redirect to any port 80 traffic (which will catch the captive portal check that any device does) for your captive users because as far as I know most client hardware has never implemented option 114 and 160 as they are written in earlier RFCs but if someone knows otherwise I’d love to hear about it.


Thank you,
Preston Taylor

From: Kea-users <kea-users-bounces at lists.isc.org> On Behalf Of Norberto Nuñez via Kea-users
Sent: Thursday, April 6, 2023 1:01 PM
To: Darren Ankney <darren.ankney at gmail.com>; Shobhith Chikku <shobhithchikku at gmail.com>
Cc: kea-users at lists.isc.org
Subject: [EXTERNAL] Re: [Kea-users] Captive Portal Using Kea DHCP.

Dears
The current recommendation is RFC8910 that changes the option numbers both for IPv4 and IPv6.
Norberto
________________________________
De: Kea-users <kea-users-bounces at lists.isc.org<mailto:kea-users-bounces at lists.isc.org>> en nombre de Darren Ankney <darren.ankney at gmail.com<mailto:darren.ankney at gmail.com>>
Enviado: jueves, 6 de abril de 2023 8:07:10
Para: Shobhith Chikku
Cc: kea-users at lists.isc.org<mailto:kea-users at lists.isc.org>
Asunto: Re: [Kea-users] Captive Portal Using Kea DHCP.

Hi Shobhith,

The client would have to support that option in order to do something useful with it.  Use tcpdump or wireshark to observe the packets between the server and client to see if the option is requested in the parameter request list and if it is returned.  You can also set the always send flag on the option so that it gets sent regardless.  But, again, the client would need to know what to do with the option before it would have any affect.

Thank you,

Darren Ankney

On Thu, Apr 6, 2023 at 6:48 AM Shobhith Chikku <shobhithchikku at gmail.com<mailto:shobhithchikku at gmail.com>> wrote:
Hi,
I am trying to build a captive portal using kea DHCP.
I tried the standard option 160 and mentioned the URL to be redirected to as the value, but no luck.
v4-captive-portal
160
string
Please help me know if the option will work or how to configure it.
Thanks in advance.
--
ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/<https://urldefense.com/v3/__https:/www.isc.org/contact/__;!!CQl3mcHX2A!DxLThn2FqAOQgpCgx5BgHjlAXAbV5n3PfZSx2qm3c6v3hiHZZO0Te706uI9JG2XKiS3j3roUhvbqc3NltBy9VIcOl5g$> for more information.

To unsubscribe visit https://lists.isc.org/mailman/listinfo/kea-users<https://urldefense.com/v3/__https:/lists.isc.org/mailman/listinfo/kea-users__;!!CQl3mcHX2A!DxLThn2FqAOQgpCgx5BgHjlAXAbV5n3PfZSx2qm3c6v3hiHZZO0Te706uI9JG2XKiS3j3roUhvbqc3NltBy9snR9N3M$>.

Kea-users mailing list
Kea-users at lists.isc.org<mailto:Kea-users at lists.isc.org>
https://lists.isc.org/mailman/listinfo/kea-users<https://urldefense.com/v3/__https:/lists.isc.org/mailman/listinfo/kea-users__;!!CQl3mcHX2A!DxLThn2FqAOQgpCgx5BgHjlAXAbV5n3PfZSx2qm3c6v3hiHZZO0Te706uI9JG2XKiS3j3roUhvbqc3NltBy9snR9N3M$>

________________________________

AVISO LEGAL: Esta información es privada y confidencial y está dirigida únicamente a su destinatario. Si usted no es el destinatario original de este mensaje y por este medio pudo acceder a dicha información por favor elimine el mensaje. La distribución o copia de este mensaje está estrictamente prohibida. Esta comunicación es sólo para propósitos de información y no debe ser considerada como propuesta, aceptación ni como una declaración de voluntad oficial de NUCLEO S.A. La transmisión de e-mails no garantiza que el correo electrónico sea seguro o libre de error. Por consiguiente, no manifestamos que esta información sea completa o precisa. Toda información está sujeta a alterarse sin previo aviso.

This information is private and confidential and intended for the recipient only. If you are not the intended recipient of this message you are hereby notified that any review, dissemination, distribution or copying of this message is strictly prohibited. This communication is for information purposes only and shall not be regarded neither as a proposal, acceptance nor as a statement of will or official statement from NUCLEO S.A. . Email transmission cannot be guaranteed to be secure or error-free. Therefore, we do not represent that this information is complete or accurate and it should not be relied upon as such. All information is subject to change without notice.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/kea-users/attachments/20230410/66723690/attachment-0001.htm>