topic Re: configure exceptions from Webauthentication in Wireless

configure exceptions from Webauthentication

amadeus — Sat, 03 Jul 2021 23:53:53 GMT

Hi,

is there a possibility to use a single SSID for guest access using primarily Webauthentication and adding exception for certain ip addresses or URL's so that a connection to e.g. cisco.com or a VPN gateway can be established without authentication but everything else needs authentication? We are using 4402 controllers with sw version 5.1.151.0.

Re: configure exceptions from Webauthentication

p.blakeway — Mon, 15 Dec 2008 21:53:28 GMT

you should be able to use a pre-authentication ACL for this very task. iirc create an ACL in security then apply ACL in the web authetication.

Re: configure exceptions from Webauthentication

amadeus — Tue, 16 Dec 2008 08:52:26 GMT

i set up the follwoing ACL and applied it to the webauthentication preauthentication ACL:

(MUCWCO04) >show acl detailed "No authentication"

1 Out 192.168.11.0/255.255.255.0 213.70.140.107/255.255.255.255 Any 0-65535 0-65535 Any Permit 0

2 In 213.70.140.107/255.255.255.255 192.168.11.0/255.255.255.0 Any 0-65535 0-65535 Any Permit 0

DenyCounter : 2037

but if i try to ping 213.70.140.107 it's not working and i just see the deny counters increasing. As soon as i log in as guest user it's working fine. Is there anything wrong on the ACL?

Re: configure exceptions from Webauthentication

amadeus — Mon, 05 Jan 2009 12:46:58 GMT

i just mixed up inbound and outbound. It's working fine now.