topic Does your certificate have in Network Access Control

Error while connecting to ISE for guest authentication

rys — Mon, 11 Mar 2019 06:03:11 GMT

Hi friends,

I attached an image which is getting while some of our users try to connect to Guest SSID using their mobiles.

It seems the issue is to Apple device users ?

Have anyone of you encountered any issue like this.

Appreciate if you could help on this.

Thanks

Riyas Rasheed

Sounds like you are

jan.nielsen — Mon, 14 Sep 2015 13:55:47 GMT

Sounds like you are redirecting to an ip address, instead of the fqdn of the ise server, that will give you errors like this.

Not facing this issue while

rys — Tue, 15 Sep 2015 03:06:57 GMT

Not facing this issue while connectin other any Android or Windows devices.

Also not all Apple devices have this issue.

The users having issue uses IOS 6 and upon connecting to Guest SSID getting this error.

Thanks

Does your certificate have

jan.nielsen — Tue, 15 Sep 2015 08:42:42 GMT

Does your certificate have any entries that point to an ip address like a san field or something else ?

Otherwise, it could be some issue with the Captive network assistant in iOS 6, from that screenshot, you didn't enable the captive portal bypass feature on the WLC, which can cause strange errors for iOS devices on wifi, and will give users many problems when trying to get on the wifi.

Command for the WLC :

config network web-auth captive-bypass enable

needs a reboot to be enabled.

Thanks Jan.We have added this

rys — Wed, 16 Sep 2015 07:12:40 GMT

Thanks Jan.

We have added this to WLC and rebooted, later users having issue are able to access.

But today again one user had this issue.

WLC is using ver 7.4 and ISE 1.4 with Patch 3

Anyother we need to verify.

Thanks