topic Re: Cisco ISE 2.7 : After redirection, the guest protal not show up in Network Access Control

Cisco ISE 2.7 : After redirection, the guest protal not show up

TJinasri — Thu, 25 Feb 2021 15:40:31 GMT

How to Fix this issue ?
NOTE: After connected to SSID: Guest, the workstation able ping to Cisco ISE

Re: Cisco ISE 2.7 : After redirection, the guest protal not show up

Mike.Cifelli — Thu, 25 Feb 2021 17:02:57 GMT

I suspect there may be an issue with your redirect acl. Please share your redirect acl so we can better assist.

Re: Cisco ISE 2.7 : After redirection, the guest protal not show up

TJinasri — Thu, 25 Feb 2021 17:18:06 GMT

I use a DACL as following :
permit udp any eq bootpc any eq bootps
permit udp any any eq domain
permit ip any host 10.228.6.218
permit ip any host 10.228.6.29
deny ip any any

and ACL on the WLC as following

mapping Authorization Profile

Re: Cisco ISE 2.7 : After redirection, the guest protal not show up

TJinasri — Thu, 25 Feb 2021 17:47:25 GMT

One time ago, the guest portal able to show up , but now I don't know what happened it's not appear.
Last time, I seen the statistics of client on WLC, it's obtained the URL for redirect detail but the page show as following the complaint.

Re: Cisco ISE 2.7 : After redirection, the guest protal not show up

MHM Cisco World — Thu, 25 Feb 2021 19:16:30 GMT

this is suddenly happened and before the Portal is display?

nslookup for ISE is success or not?

Re: Cisco ISE 2.7 : After redirection, the guest protal not show up

TJinasri — Fri, 26 Feb 2021 02:31:36 GMT

Hi MHM,
this is suddenly happened and before the Portal is display?
: In the word "One time ago", i mean last month. Currently the Portal not display but pop-up and show "This site can't be reached".
I think our customer use the base license exceeded or NOT

nslookup for ISE is success or not?
: Yes, nslookup is success

Re: Cisco ISE 2.7 : After redirection, the guest protal not show up

Marcelo Morais — Fri, 26 Feb 2021 04:26:39 GMT

Hi @TJinasri

please double check the configuration at CWA on the WLC and ISE Configuration Example. Take a look at the Verify section.

Hope this helps !!!

Re: Cisco ISE 2.7 : After redirection, the guest protal not show up

TJinasri — Fri, 26 Feb 2021 04:48:38 GMT

Hi Marcelo,
I will try verify following as your recommended.
Thank you !!

Re: Cisco ISE 2.7 : After redirection, the guest protal not show up

MHM Cisco World — Sun, 28 Feb 2021 12:51:43 GMT

is it Self-register or self-register with sponsor ?

Re: Cisco ISE 2.7 : After redirection, the guest protal not show up

thanakon@datacom8.com — Sun, 28 Feb 2021 13:22:37 GMT

Hi MHM,
It's Sponsor.

Re: Cisco ISE 2.7 : After redirection, the guest protal not show up

MHM Cisco World — Sun, 28 Feb 2021 13:59:12 GMT

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215931-ise-guest-account-management.html

I think this is relate to suspend of guest by ISE,
where the sponsor can suspend this guest after few days " you can config this period".
now guest can not access.
see above doc. about guest account.

Re: Cisco ISE 2.7 : After redirection, the guest protal not show up

TJinasri — Mon, 01 Mar 2021 02:06:36 GMT

Hi MHM,
Thank you for your suggestion , I will recheck.