topic Possibly check that CoA is in Network Access Control

ISE authentication loop

smartns04 — Mon, 11 Mar 2019 06:52:11 GMT

Hi,

Our setup is as follows;

1) Cisco ISE

2) WLC2504

3) Guest SSID

Once a user connects to Guest SSID and tries to access a website, the user is redirected to the authentication page of the policy node.We have connected the ISE with our AD and after the user types the credentials, the page shows successful authentication but cannot access internet. When you try access the internet page again, a new login window is displayed. The ISE live authentication page shows successful login.

Any ideas what to look for?

Possibly check that CoA is

Dustin Anderson — Thu, 16 Jun 2016 16:52:38 GMT

Possibly check that CoA is enabled on the WLC so the endpoint gets the removal of the ACL redirect. This is in the RADIUS setup on the WLC

If FW's are involved verify

michacollins — Wed, 22 Jun 2016 14:19:33 GMT

If FW's are involved verify rules are allowing CoA.