topic Re: Wireless Guest is stuck in Sponsor Guest Portal after he authenticates successfully and browses anything online in Network Access Control

Wireless Guest is stuck in Sponsor Guest Portal after he authenticates successfully and browses anything online

hbaytie01 — Fri, 21 Feb 2020 18:56:25 GMT

Hi,

I configured Wireless Guest using Cisco ISE 2.0 Wireless Guest Setup Wizard, everything looks okay regrading the configuration and the user wants he connects to the WLAN he is able to self register his self and gets the password. After he enters the credentials and he typed anything like google.com, he is redirected to the Sponsor guest portal where he is asked to enter the credentials again and again. I saw i similar case but it is was a different setup with WLC (Anchor+Foreign). https://supportforums.cisco.com/t5/aaa-identity-and-nac/looping-authentication-page-after-successful-login-cisco-ise/td-p/2570492

Any Help???

Re: Wireless Guest is stuck in Sponsor Guest Portal after he authenticates successfully and browses anything online

dacabrer — Sun, 20 May 2018 13:11:32 GMT

Hi,

Two possible scenarios:

- ISE is not receiving the CoA-ACK from the WLC; you should be able to confirm this by looking in the RADIUS live logs for a Dynamic Authorization Failure. Port 1700 could be blocked or the CoA feature is not enable in the WLC (or it is just not responding back)

- Policy issue; the Network Access EQUALS Guest Flow then PermitAccess is missing

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116087-configure-cwa-wlc-ise-00.html

Best regards,

-dacabrer

Re: Wireless Guest is stuck in Sponsor Guest Portal after he authenticates successfully and browses anything online

hbaytie01 — Sun, 20 May 2018 08:43:55 GMT

The CoA feature wasn't enabled in the Radius Server WLC: