We are trying to setup a BYOD config for Android devices.
Have been following the information provided within this video as a guide, although the AP's in this design are local mode - How to Configure ISE 3.0 BYOD Wireless Onboarding (Single SSID Dual SSID) (Part 1) (labminutes.com)
We have setup our 9800-40 WLC (17.9.4a) with an SSID specific for the purpose (AP's are all in flexconnect mode) and autentication using dot1x, against Active Directory, using Single SSID approach. We have defined a preauth filter and redirect ACL, etc... We have configured BYOD portal, NSP, client provisioning policy and then defined policy set which includes blacklist, redirect using the Client provisioning policy and finally a registered configuration.
We can see that when the client connects to the SSID that the authentication against AD is successful and that we match with the Authorization policy for the redirect to the BYOD portal. Client device never seems to get an IP Address and doesn't connect to the wifi to undertake the redirect. On the device we get Couldn't conect to network error message. No errors shown within ISE following the successful autehntication and the match for the authorization policy to undertake the redirect.
BYOD Portal is working from the test URL within the portal design, so seems to be OK.
If I change the policy to remove the redirect and use a result of permit access, the client connects, obtains an IP address and can browse the network as expected. Android device is a Samsung Galaxy Tab 9a with Android 14.
Anyone any ideas on what could be the issue/how to resolve?
Thanks in advance
