Cisco ISE 2.7 : After redirection, the guest protal not show up

[TJinasri]

How to Fix this issue ?
NOTE: After connected to SSID: Guest, the workstation able ping to Cisco ISE

[Mike.Cifelli]

I suspect there may be an issue with your redirect acl.  Please share your redirect acl so we can better assist.  

[TJinasri]

I use a DACL as following :
permit udp any eq bootpc any eq bootps
permit udp any any eq domain
permit ip any host 10.228.6.218
permit ip any host 10.228.6.29
deny ip any any

and  ACL on the WLC as following

mapping Authorization Profile

[TJinasri]

One time ago, the guest portal able to show up , but now I don't know what happened it's not appear.
Last time, I seen the statistics of client on WLC, it's obtained  the URL for redirect detail but the page show as following the complaint.

[MHM Cisco World]

this is suddenly happened and before the Portal is display?

nslookup for ISE is success or not?

[TJinasri]

Hi MHM,
this is suddenly happened and before the Portal is display?
: In the word "One time ago", i mean last month. Currently the Portal not display but pop-up  and show "This site can't be reached".
I think our customer use the base license exceeded or NOT

nslookup for ISE is success or not?
: Yes, nslookup is success

[Marcelo Morais]

Hi @TJinasri 

 please double check the configuration at CWA on the WLC and ISE Configuration Example. Take a look at the Verify section.

Hope this helps !!!

[TJinasri]

Hi Marcelo,
I will try verify following as your recommended.
Thank you !!

[MHM Cisco World]

is it Self-register or self-register with sponsor ?

[thanakon@datacom8.com]

Hi MHM,
It's Sponsor.

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215931-ise-guest-account-management.html

I think this is relate to suspend of guest by ISE, 
where the sponsor can suspend this guest after few days " you can config this period".
now guest can not access. 
see above doc. about guest account.

[TJinasri · Accepted solution]

Hi MHM,
Thank you for your suggestion , I will recheck.