Client Provisioning URL

latenaite2011 — Fri, 21 Feb 2020 18:57:48 GMT

Does anyone know how to change the URL so that it uses an IP address instead of using a hostname?

I can see it in the log that it is try to use the hostname of the ISE server instead of an IP (I just have a lab environment so DNS isn't working properly).

For example,

This is what shows up in the authorization profile

cisco-av-pair = url-redirect=https://ip:port/portal/gateway?sessionId=SessionIdValue&portal=40f01bd0-2e02-11e8-ba71-005056872c7f&action=cpp

but the details in the log show:

url-redirect=https://iselab.testlab:8443/portal/gateway?sessionId=C0A8015D0000019704222318&portal=40f01bd0-2e02-11e8-ba71-005056872c7f&action=cpp&token=6ada0bce3d88af57bf5e83f87e0e35e4

Secondly, when I disconnect and reconnect the cable, I don't see the Anyconnect client or the compliance check happening on the Anyconnect window. Nothing is happening on the Anyconnect client at all.

Does anyone know why?

Re: Client Provisioning URL

latenaite2011 — Thu, 07 Jun 2018 21:38:01 GMT

Ok, when I connect, the Anyconnect client says there Web authentication is required and when I open Chrome or IE, it just browsers up the browser to Google.com. I don't get anything.

When I try https://ise-hostname:8905/auth/discovery, I get an SSL error message and I accept it and nothing happens.

topic Re: Client Provisioning URL in Network Access Control

Client Provisioning URL

Re: Client Provisioning URL