topic Re: 9800 CL Redirect ACL Not Working in Wireless

9800 CL Redirect ACL Not Working

calluuml — Mon, 05 Jul 2021 19:43:45 GMT

I am trying to create a hotspot portal (passthrough web auth) and the redirect ACL is not working and the client is gaining full access.

The ACL has been created on the WLC, pushed to the AP via the Flex profile and I can see the URL redirect ACL has applied to the client.

I will attach a copy of the redirect ACL.

We do run dual stack so I am thinking maybe the IPv6 traffic is getting out as normal however in ISE there is only 1 ACL to supply via the av pair, is there a way to send another for IPv6?

Thanks,

Re: 9800 CL Redirect ACL Not Working

rschwart — Thu, 14 Jan 2021 20:29:03 GMT

Have you found a solution to this?

Re: 9800 CL Redirect ACL Not Working

craig.beck — Fri, 15 Jan 2021 09:19:57 GMT

Have you tried disabling IPv6 on the client temporarily to test whether the IPv4 ACL is doing its job correctly?

If the IPv4 ACL works you may be able to work around the IPv6 issue by configuring an IPv6 ACL as a pre-auth ACL, then use AAA override to send a different IPv6 ACL when the client authenticates (assuming you're using RADIUS).