This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC!
We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.
I'm having some trouble with CNA and our guest portal, and I suspect the WLC image, but I can't seem to find a compatibility chart between Apple CNA, ISE and WLC? Any help?
Solved! Go to Solution.
the captive portal is disabled. The GUI is disabled, and the CLI is:
Web Auth Redirect Ports .................... 80
Web Auth Proxy Redirect ................... Disable
I noticed the default ports in the config guide, and our portal is running on 8447. Could this have an impact?
Sorry, misread the guide!
The section before captive portal bypass is "web auth proxy"!
Next time you're having cake at the office, it's on me!
I had deleted my post because it was a bit strongly worded and I thought that I may have missed something. I do have a TAC case open. They don't know how to make IPhone CNA work. The initial response was captive portal bypass which is a joke. This does not work and has not worked for years. There are numerous threads on numerous forums stating the same thing. Apple has no documentation on how their CNA works nor will they release any. Cisco has no documentation that mentions this issue, a workaround, or what would be required to make it work correctly.
I'm just not seeing it work. I am testing 8.5 MR3 and ISE 2.2 patch 6 with IOS clients, haven't seen CNA launch yet. They fool around guessing different websites until the portal pops up. We're going to be upgrading ISE to 2.4 soon but this appears to be a WLC issue.