topic Re: sponsor portal FQDN in Network Access Control

sponsor portal FQDN

Ping Zhou — Tue, 06 Mar 2018 19:44:53 GMT

Hello ISE Experts,

I'm trying to come up with some FQDN naming convention for Sponsor Portal, so when I point my browser to https://<my-sponsor-portal-FQDN>, or simply just "<my-sponsor-FQDN>, the PSNs know how to automatically redirect to their internal virtual servers which are something like "https://<PSN-FQDN>:8443/sponsorportal/PortalSetup.action?portal=bb6ba630-c5cd-11e5-afb0-70e422e5e9c4"?

Is there any doc explaining how PSN does this kind of redirect? Is it based on inbound HTTP or HTTPS request header on a request receiving PSN, then the PSN is looking for "sponsor" or any word that including "sponsor" as the filter keywords?

Thanks!

Re: sponsor portal FQDN

hslai — Tue, 06 Mar 2018 20:12:21 GMT

The PSN will look at at the hostname in the incoming requests and decide how to process them.

A sponsor portal FQDN does not need "sponsor" in it. It can be any regular FQDN resolved to an IP address of one of PSNs or a load-balancer VIP or the like but can't be the ones used as the ISE nodes; that is, the sponsor friendly FQDN can not be psn-1.demo.local, if psn-1.demo.local is one of the PSNs.

Re: sponsor portal FQDN

Jason Kunst — Tue, 06 Mar 2018 20:36:53 GMT

You setup the actual name(s) under the sponsor portal

Whatever you enter there will be interesting

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_011110.html#reference_5F10051EBA9046468988DCEB54C60853