cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

2011
Views
20
Helpful
11
Replies
TJinasri
Beginner

Cisco ISE 2.7 : After redirection, the guest protal not show up

InkedmessageImage_1614246135343_LI.jpg

How to Fix this issue ?
NOTE: After connected to SSID: Guest, the workstation able ping to Cisco ISE

 

1 ACCEPTED SOLUTION

Accepted Solutions

Hi MHM,
Thank you for your suggestion , I will recheck.

View solution in original post

11 REPLIES 11
Mike.Cifelli
VIP Advocate

I suspect there may be an issue with your redirect acl.  Please share your redirect acl so we can better assist.  

I use a DACL as following :
permit udp any eq bootpc any eq bootps
permit udp any any eq domain
permit ip any host 10.228.6.218
permit ip any host 10.228.6.29
deny ip any any

and  ACL on the WLC as following
Screenshot_4.jpg

mapping Authorization Profile
Screenshot_5.jpg

TJinasri
Beginner

One time ago, the guest portal able to show up , but now I don't know what happened it's not appear.
Last time, I seen the statistics of client on WLC, it's obtained  the URL for redirect detail but the page show as following the complaint.

this is suddenly happened and before the Portal is display?

nslookup for ISE is success or not?

Hi MHM,
this is suddenly happened and before the Portal is display?
: In the word "One time ago", i mean last month. Currently the Portal not display but pop-up  and show "This site can't be reached".
I think our customer use the base license exceeded or NOT

nslookup for ISE is success or not?
: Yes, nslookup is success

Hi @TJinasri 

 please double check the configuration at CWA on the WLC and ISE Configuration Example. Take a look at the Verify section.

 

Hope this helps !!!

Hi Marcelo,
I will try verify following as your recommended.
Thank you !!

is it Self-register or self-register with sponsor ?

Hi MHM,
It's Sponsor.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215931-ise-guest-account-management.html

 

I think this is relate to suspend of guest by ISE, 
where the sponsor can suspend this guest after few days " you can config this period".
now guest can not access. 
see above doc. about guest account.

Hi MHM,
Thank you for your suggestion , I will recheck.

View solution in original post

Content for Community-Ad