topic I hope this help for future in Wireless

Flexconnect Local Guest Wireless w/ Web-Auth

Heath Deschenes — Sun, 04 Jul 2021 07:38:18 GMT

Is it possible to provide locally switched guest wireless access in flexconnect mode with Web-Auth? All of the documentaion examples I can find show guest webauth with central switching.

I want a remote office, connected via DMPVN, to provide guest wireless from a flexconnect access point using local switching so it will go out the local Internet connection. The local switching works great for the Internal wireless that do central auth via EAP-FAST. The problem seems to arrise when I try to configure it for Web-Auth.

If I configure the local client DHCP scope to provide an external DNS it will not reach the Web-Auth page.

If I configure the local client DHCP scope to provide an internal DNS it will reach the Web-Auth page, but it will not go anywhere after that.

Is there something I am missing?

Re: Flexconnect Local Guest Wireless w/ Web-Auth

Heath Deschenes — Mon, 12 Aug 2013 19:39:31 GMT

I forgot to add that the controller is an AIR-CT2504-K9 running version 7.4.100.0

The access point is internal to the DMVPN router model CISCO891W-AGN-N-K9

Re: Flexconnect Local Guest Wireless w/ Web-Auth

Abhishek Abhishek — Wed, 14 Aug 2013 19:30:28 GMT

Hello,

As per your query i can suggest you the following link-

http://www.cisco.com/en/US/docs/wireless/controller/7.2/configuration/guide/cg_flexconnect.html

Hope this will help you.

Re: Flexconnect Local Guest Wireless w/ Web-Auth

Scott Fella — Wed, 14 Aug 2013 21:56:19 GMT

Here is a simple link. And yes it will work

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080b3690b.shtml

Services

This table lists the legacy and new services supported with WLC version 7.0.116.0 with FlexConnect.

WAN Up (Central Switching) WAN Up (Local switching) WAN Down (Standalone)
Internal Webauth Yes Yes N/A
External Webauth Yes (7.2.110.0) Yes (7.2.110.0) N/A

Sent from Cisco Technical Support iPhone App

Re: Flexconnect Local Guest Wireless w/ Web-Auth

Howard County Library System — Thu, 05 Sep 2013 07:03:18 GMT

I am having the same issue have you been able to resolve this? Neither of the links above explain how to properly configure this setup.

Flexconnect Local Guest Wireless w/ Web-Auth

Konstantin Konotopchik — Sun, 24 Nov 2013 20:35:45 GMT

I have the same issue, clients cant connect to wi-fi with web auth passthrough (flexconnect local switching) when ap dissassociated from controller, TAC says that now thay cant do nothing.

Flexconnect Local Guest Wireless w/ Web-Auth

Saravanan Lakshmanan — Sat, 28 Dec 2013 12:00:17 GMT

#Webauth on local switching behavior is bit complicated but it works.

#It uses the DNS ip received from central-dhcp or local/remote dhcp server at the site for that client based on the config.

#the DNS response is snooped by AP(if remote/local dhcp is used or WLC for central-dhcp) and forwards it to WLC via capwap to display the internal page, if configured to use internal webauth page.

Try this:

#Set WLC to do http redirection, disable https redirection which is default.

#set AP to flexconnect, wlan to locally switched and enable webauth. Connect the wireless client, do nslookup, check what dns it is trying to use, it should use the one from the configured DHCP scope, if not statically configured on client.

#if nslookup doesn't works then try http:// . And fix the dns access or enable/use central dhcp option on wlan .

#if redirection doesn't happen irrespective of auto/manual then enable tcp mss.

#Enable TCP-mss for APs, default is 1363. keep reducing until redirection works.

If stil doesn't work Open TAC case for further troubleshooting.

Can you please email the

Lovett D'Souza — Sun, 11 May 2014 03:25:33 GMT

Can you please email the steps to me lovettd1@yahoo.com Thanks

I hope this help for future

Oscar Andres Rivera Cortes — Thu, 11 Sep 2014 13:50:30 GMT

I hope this help for future references:

www.cisco.com/c/en/us/support/docs/wireless/flex-7500-series-wireless-controllers/113605-ewa-flex-guide-00.html

Dear Scott, Thank you for

abhisar patil — Tue, 04 Nov 2014 05:42:25 GMT

Dear Scott,

Thank you for your comment. I checked the link you shared, however I also checked one more link where it is mentioned -Note Guest user configuration is not supported with FlexConnect local switching.

Does this mean that guest web auth is not possible in flexconnect?

Actually, I looking that my guest users should authentication via webauth(as I want to control user with time based access) and once authentication the browsing should happen locally for internet access. Can you please suggest if this is possible, as I tried searching many documents for this.

Thank You,

locally switched guest and central web authentication

cisco — Fri, 24 Jan 2020 20:09:25 GMT

Locally switched guest and central web authentication works. Make sure the "Local Net Users" are set up for the right WLAN, or chose "Any WLAN".