topic Fault on https://1.1.1.1/login.html in Network Access Control

Fault on https://1.1.1.1/login.html

Ahmed Zniti — Mon, 11 Mar 2019 02:57:08 GMT

Hello

I have a fault by WLC when i configured a web authentication including Flexconnect ACL so when the guest connect on wifi the url redirected is

https://ISE IP ADDRESS:8443/guestportal/Login.action?switch_url=https://1.1.1.1/login.html&ap_mac=a4:18:75:43:f0:c0&client_mac=e0:06:e6:78:9c:d5&wlan=TestGuest&redirect=www.google.tn/ but if the guest put only this URL https://1.1.1.1/login.html he can put any username and password then access to the internet

Can you help me to resolve this issue

Thanks

Fault on https://1.1.1.1/login.html

Tarik Admani — Tue, 08 Jan 2013 16:18:11 GMT

Ahmed,

Are you doing external web authentication redirect from the wireless lan controller? If so, why not use the redirect and use the CWA method instead.

Please post a screenshot of your L3 settings along with a screenshot of the client entry on the WLC.

Thanks,

Tarik Admani
*Please rate helpful posts*

Fault on https://1.1.1.1/login.html

Ahmed Zniti — Wed, 09 Jan 2013 09:41:30 GMT

Hello Tarik

we used the redirect and the CWA method instead it works thanks but if the redirect occurs the URL display the name of ISE not the IP ADRESS and the guest user must put the dns manually for the first step and after logging to access internet he must put dns dynamic the following is the URL https://DOTISE:8443/guestportal/ so is it possible to redirect with IP Address and with dynamic DNS

Thanks

Ahmed Zniti

Fault on https://1.1.1.1/login.html

Tarik Admani — Wed, 09 Jan 2013 16:04:22 GMT

Hi Ahmed,

Yes this is the behavior of ISE, it will redirect with the hostname and not the ip address. A few users have tried but it doesnt work so well.

I am wondering why you can create a dns record for the ise appliances so your users can get redirected instead of using an ip address?

Thanks,

Tarik Admani
*Please rate helpful posts*

Fault on https://1.1.1.1/login.html

Ahmed Zniti — Thu, 10 Jan 2013 12:07:28 GMT

Hi Tarik,

Is it possible to change the FQDN on ISE because we want to use an external DNS Server

Thanks

Ahmed Zniti