cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
742
Views
0
Helpful
1
Replies

Cisco ISE CWA Wired is not working

ivan.martin
Level 1
Level 1

Hi my name is ivan 

I have an issue with cisco ise cwa redirect wired:

My catalyst switch (3650 03.06.06E - cat3k_caa-universalk9) is showing the follow message:

 

%IOSXE-5-PLATFORM: 1 process fed:  Logging is not supported for Client/Group ACL

 

The web page of cwa is not showing. 

From the switch i can see the details of process:

show authen ses int gi1/0/8

Interface: GigabitEthernet1/0/8
IIF-ID: 0x1073B4000000262
MAC Address: 54ee.7500.bcad
IPv6 Address: Unknown
IPv4 Address: a.b.c.d
User-Name: 54-EE-75-00-BC-AD
Status: Authorized
Domain: DATA
Oper host mode: multi-domain
Oper control dir: both
Session timeout: N/A
Restart timeout: N/A
Periodic Acct timeout: 172800s (local), Remaining: 172695s
Session Uptime: 137s
Common Session ID: 76FDFEFB0000115743AB598A
Acct Session ID: 0x000020D2
Handle: 0x17000178
Current Policy: POLICY_Gi1/0/8

Local Policies:
Service Template: DEFAULT_LINKSEC_POLICY_SHOULD_SECURE (priority 150)

Server Policies:

Vlan Group: Vlan: Z
URL Redirect: https://ise.abc.com:8443/portal/gateway?sessionId=76FDFEFB0000115743AB598A&portal=4bd88730-e371-11e6-92ce-005056873bd0&action=cwa&token=87504446060c886a870eef185606e0d8
URL Redirect ACL: CWA_Redirect
ACS ACL: xACSACLx-IP-ACL-CWA-LOGIN-59adad2a

Method status list:
Method State

dot1x Stopped
mab Authc Success

 

I try to type: 1.1.1.1, https://ise.abc.com:8443, https://ise, in the url and from ise nslookup cisco.com, but nothing.

 

Can you help me?

Regards, Ivan.

1 Reply 1

Francesco Molino
VIP Alumni
VIP Alumni
Hi

Can you paste the acl config you’re trying to push?

Thanks

Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question