Guest Redirect URL missing in the Radius Response in Live Log

harrzhan — Fri, 14 Sep 2018 21:05:06 GMT

In our lab, the wired Guest CWA redirect works well with 3750v2 switch. When we use the same configuration in the production ISE nodes, strangely, the Radius av pair disappeared in the Radius response.

The Guest Redirect policy is hit. The GUEST-REDIRECT ACL is called out. the av-pair for the url is just missing. The authorization profile has the CWA configured. Even we changed it to a static IP, it is still missing.

On the switch show auth session, the Server Policy portion is missing as well. No Redirect ACL nor the url.

The only difference between the lab and the production is that the production ISE nodes are behind the F5.

Re: Guest Redirect URL missing in the Radius Response in Live Log

Jason Kunst — Tue, 18 Sep 2018 16:07:01 GMT

did you look at the Cisco Live performance and scale ?
https://community.cisco.com/t5/security-documents/ise-training/ta-p/3619944#toc-hId-1281981443

also how to guide?
https://community.cisco.com/t5/security-documents/ise-design-amp-integration-guides/ta-p/3621164#toc-hId--617671030

otherwise please troubleshoot with tac

topic Re: Guest Redirect URL missing in the Radius Response in Live Log in Network Access Control

Guest Redirect URL missing in the Radius Response in Live Log

Re: Guest Redirect URL missing in the Radius Response in Live Log