topic Flexconenct with Web Authentication WLC3500 in Wireless

Flexconenct with Web Authentication WLC3500

mhawas — Mon, 05 Jul 2021 17:24:00 GMT

Hi ,

I am deploying a guest SSID at remote location in Felxconenct mode , and trying to do L3 webauthentication but clients are not redirecting to the splash web page. WLC is 3500 model with 8.5.131 software / AP model is 38021.

While trying other authentication method (PSK) , the client is able to connect successfully and browse internet as well.

DHCP scope is configured locally on the switch, DNS is google (8.8.8.8)

is there any suggestions ?

Re: Flexconenct with Web Authentication WLC3500

Rasika Nayanajith — Thu, 16 May 2019 01:25:54 GMT

Pls see following deployment guide helps you with it

https://www.cisco.com/c/en/us/support/docs/wireless/flex-7500-series-wireless-controllers/113605-ewa-flex-guide-00.html

Regards

Rasika

Re: Flexconenct with Web Authentication WLC3500

mhawas — Thu, 16 May 2019 05:38:07 GMT

Hi Rasika,

Thank you for your reply !

I have already seen this guid, in my situation internal web authentication is used (WLC) so i have followed all steps except redirecting to external web server and applying pre authentication ACL. But still the client is not redirected to web authentication page.

Do i have to configure ACL to make it work ?

Regards,

Hawas

Re: Flexconenct with Web Authentication WLC3500

patoberli — Fri, 17 May 2019 14:04:41 GMT

Which IP address has your virtual interface? You should use 192.2.0.1 for example. In no case use 1.1.1.1.

Re: Flexconenct with Web Authentication WLC3500

Sathiyanarayanan Ravindran — Tue, 21 May 2019 20:12:29 GMT

Yes, You have to configure ACL and need to allow on the AP or Flexconnect Group (if you are using it).

Re: Flexconenct with Web Authentication WLC3500

mhawas — Tue, 21 May 2019 22:08:51 GMT

Thanks Patoberli and Ravindran for reply !

virtual interface address is 2.2.2.2 and I don't use ant ACL with Flexconenct.

It works now , the problem was there was an old unmanaged AP (SOHO) broadcasting same SSID.

Re: Flexconenct with Web Authentication WLC3500

patoberli — Wed, 22 May 2019 06:40:23 GMT

Don't use the IP 2.2.2.2. Use an IP of the range 192.0.2.0/24. As soon 2.2.2.2 uses HSTS (like 1.1.1.1 does) and the OS of the clients or browsers gets updated, they cannot connect anymore.