Cisco AP was unable to perform a redirect to protal intermittently

[Andy Yuan1993]

Hi everyone

ISE version:2.2.0.470
WLC version:8.5.110.0
I am having intermittent problem with access the guest protal.According to packet catching, endpoint sends TCP-SYN packets to ISE, but ISE does not receive the packets through troubleshooting.That is unable to establish TCP session.
I can get the redirect URL by looking at the endpoint on WLC, but AP cannot perform the redirect, resulting in endpoint not being able to jump to the protal page.The endpoint cannot ping ISE.
When the situation is normal,endpoint gets the protal page and ping ISE,also receive the SYN packet form ISE.

[ldanny · Accepted solution]

Please contact TAC for further troubleshooting.