topic Local Web Authentication NAC Guest Server in Network Access Control

Local Web Authentication NAC Guest Server

alfonso.cornejo — Mon, 11 Mar 2019 01:54:57 GMT

Hi to all,

Is it possible to configure web authentication for a wireless network using a NAC Guest Server but without a WLC??? I'm following the document

http://www.cisco.com/en/US/prod/collateral/iosswrel/ps6537/ps6586/ps6638/app_note_c27-577490.html in order to configure it for the wired lan.

I don't have an ACS and i'm not sure if a can "point" my switches directly to the NAC Guest Server for the users authentication or if i need to use another external radius??? The problem that i have is that the switch seems to be doing the redirection for the web auth but after i enter the guest user and psw the browser shows me the link https://1.1.1.1/?redirect_url=http%3A//172.19.20.248/admin/ but it doesn't shows the Success web page and also in the Guest Server there is no log for any success authentication.

Is it possible to connect and access point to the port switch configured for the web auth and with that i will have all the wireless clients being authenticated???

Thanks in advance for your help.

Regards,

Local Web Authentication NAC Guest Server

Tarik Admani — Sat, 17 Mar 2012 20:38:38 GMT

Alfonso,

The documentation that you posted is for additional polices since the NGS can only send back an access-accept.

Here is the guide on how configure NGS for wired authentication:

http://www.cisco.com/en/US/docs/security/nac/guestserver/configuration_guide/20/g_hotspots.html#wp1092696

Hope this helps,

Tarik Admani

Local Web Authentication NAC Guest Server

alfonso.cornejo — Sat, 17 Mar 2012 22:53:59 GMT

Hi Tarik,

Do you know if it is possible to use the NGS for web authentication for a wireless network without a WLC??

The radius server is needed???

Thanks in advance!

Local Web Authentication NAC Guest Server

Tarik Admani — Sun, 18 Mar 2012 20:29:45 GMT

I do not think this is possible and here is a link from another thread that has this question answered.

https://supportforums.cisco.com/thread/2087668

thanks,

Tarik Admani