topic Re: portal authentication fail in Wireless

portal authentication fail

willwillwang — Mon, 18 Oct 2021 08:50:48 GMT

i use a other portal authentication server wlc redirect url to client

client input username and password no authentication success

i use wireshark see a fail with certificate

how can i solve it

Re: portal authentication fail

balaji.bandi — Mon, 18 Oct 2021 09:03:56 GMT

what kind of Cert you using ? is this valid FQDN ? or Local Certs.

Re: portal authentication fail

willwillwang — Mon, 18 Oct 2021 10:17:25 GMT

use the wlc default cert and i don't config fqdn in virtual ip (1.1.1.1)

Re: portal authentication fail

Arshad Safrulla — Mon, 18 Oct 2021 13:59:07 GMT

Username and password doesn't have anything to do with the portal certificate, check whether the

1. local users are created

2. If users are created confirm the credentials.

To create new users you can navigate to Security>>AAA>>Local Net Users

Also consider changing 1.1.1.1 virtual IP as this IP i spublicly routed now. Read below for more info.

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/213535-wlc-virtual-ip-address-1-1-1-1.html

Re: portal authentication fail

Scott Fella — Mon, 18 Oct 2021 15:12:47 GMT

How to fix that is to install a trusted 3rd party certificate and make sure the FQDN used on that certificate is resolvable by the dns servers the guest clients are using. Have you tried to login to the portal yourself? You probably get a certificate error from your browser due to using default self signed certificates.

Generate CSR for Third-Party Certificates and Download Chained Certificates to the WLC - Cisco

Re: portal authentication fail

willwillwang — Tue, 19 Oct 2021 01:26:08 GMT

i think install 3rd cer can solve problem

can i disable websecure https to solve problem?

Re: portal authentication fail

Scott Fella — Tue, 19 Oct 2021 01:56:38 GMT

You can try that, that would stop the error.

Re: portal authentication fail

balaji.bandi — Tue, 19 Oct 2021 05:56:46 GMT

if the Locally signed CA, get the client cert and install on PC and test.