Change Guest portal from HTTPS to HTTP

[qhu]

Hi All ,

  How can we set guest portal from https to http , otherwise customer's browser will show warning of Certification ! !

[Jason Kunst · Accepted solution]

No please disable https redirection on the network access device

Under the guest web auth page there is an article that says why https redirection is not recommended as you can tell

https://communities.cisco.com/message/250154?mobileredirect=true

[Jason Kunst]

TO clarify there is no way to do http guest services, you need to disable https redirection on the NAD

[Greg Gibbs]

Qhu,

As Jason mentions, you can't remove the requirement to have HTTPS for the portals, so you can't get rid of the certificate used to protect the Portal.

The best way to resolve the issue with customers getting certificate warnings is to use a certificate signed by a public CA for all end-user facing portals. Most operating systems include trust chains for the major public CAs, so the user won't get a certificate warning.

-Regards,

Greg

[Jason Kunst]

Even with well known cert I believe you will see a mismatch

As mentioned in the link attached to previous reply we don’t recommend https redirection for several reasons

Some customers have even gone as far of setting up a dmz server for http requests to go to. Example guest.mycompany.com<http://guest.mycompany.com>

Also it’s best to rely on captive portal detection mechanisms on the os to handle the redirect and pop up automatically. Easy for users but requires captive portal bypass to be disabled ok your wireless controller