topic The client's don't need to in Wireless

WLC 5500 Web Auth - Certificate Error

j44mistry — Mon, 05 Jul 2021 07:58:55 GMT

Hello,

SSL Certificate Error received before and after Web Auth banner page when users try to access the Internet.

Is there a way to change the WebAuth to use http instead of https ?

If you are running 7.2 or

Stephen Rodriguez — Tue, 10 Jun 2014 12:20:10 GMT

If you are running 7.2 or newer code you can do it very simply. You just need to issue the command:

config network web-auth secureweb disable

HTH,

Steve

We have version 7.0.116.0.

j44mistry — Tue, 10 Jun 2014 13:15:48 GMT

We have version 7.0.116.0.

Is that command to disable WebAuth ?

We need the banner pager for logging purposes but don't want to get SSL Security messages.

As WebAuth use https thought it may be easier to use http instead ?

Jay

No, it doesn't disable

Stephen Rodriguez — Tue, 10 Jun 2014 13:20:25 GMT

No, it doesn't disable webauth, it just stops it from needing to use HTTPS.

For 7.0 you need to disable HTTPS for management totally.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/115951-web-auth-wlc-guide-00.html#httpnots

But I would just upgrade to newer code if your AP's will support being there.

HTH,

Steve

Sorry what is the issue if I

j44mistry — Tue, 10 Jun 2014 13:30:36 GMT

Sorry what is the issue if I don't upgrade ? will APs issue another error ?

I have never done the upgrade so not sure if its quick or needs a lot of work.

Thanks

if you don't upgrade, the

Stephen Rodriguez — Tue, 10 Jun 2014 13:36:55 GMT

if you don't upgrade, the management of the WLC will not be SSL encrypted. Some people don't want the management unencrypted.

And 7.0.116 is pretty old as well. Take a look at the release notes for 7.4 code and see if you like the features/bug fixes.

Steve

Ok great many thanks !

j44mistry — Tue, 10 Jun 2014 13:42:43 GMT

Ok great many thanks !

Hi Steve, I think instead of

j44mistry — Tue, 17 Jun 2014 15:41:24 GMT

Hi Steve,

I think instead of upgrading and disabling https they want us to install a certificate.

If I go out and buy a certificate and install on WLC will all clients get this certificate automatically ?

Are there likely to be any issues still ?

The client's don't need to

Stephen Rodriguez — Tue, 17 Jun 2014 15:46:46 GMT

The client's don't need to download the certificate. they need to have a trust of the root authority that issues it. So if you use a well known authority, they should have that trust by default

HTH,

Steve

We have client users roaming

j44mistry — Tue, 17 Jun 2014 15:50:40 GMT

We have client users roaming to UK from US and other countries using our WiFI how do you determine the well known authority ? We cant check every device so was not sure which certificate to go for ?.

I've not heard that it

Stephen Rodriguez — Tue, 17 Jun 2014 15:58:49 GMT

I've not heard that it matters country to country. more of an OS thing.

But if you stick with Verisign, Thawte, even GoDaddy now a days you should be fine.

Steve

Ok great I will try and come

j44mistry — Tue, 17 Jun 2014 16:07:12 GMT

Ok great I will try and come back in a weeks time to confirm.