ISE BYOD ONBOARDING aka client stuck in onboarding

[Jean Paul Enerst]

Hi Gents,

I am in the process of doing a trial with ISE; however, i am having some hard time to get client to onboard properly. The client can connect just fine, the redirection to the onboard page kicking but it returns  web page not available. Testing with a Window 7 and Pixel phone... same result in both. BYOD test portal in ISE works fine.

WLC is configured with ACL to allow any traffic to flow to and from ISE... Also ACL for DNS is configured as well. Even tested by replacing the FQDN with the IP... no dice!

Any help will be appreciate.

Thanks,

[anthonylofreso]

Could you post a screen shot of your wlc acl?

[Jean Paul Enerst]

Hi Anthony,

Thanks for the reply... here is the ACL in WLC.

[anthonylofreso]

I have a deny any on the end of mine, but I believe yours is also valid and should be fine. I'd check what Jason says below.

[Jean Paul Enerst]

Thanks

[Jason Kunst · Accepted solution]

Make sure DNS can resolve ISE FQDN IP and your certificate matches correctly for the portal

Follow how to guide on this page
https://community.cisco.com/t5/security-documents/ise-byod/ta-p/3641689

[Jean Paul Enerst]

Hi Jason,

Thanks for the reply but i have double checked these information and i also read the deployment guide as well. It comes to the point where i believe issue maybe policy related.

Thanks anyway