03-09-2022 03:54 AM
Hi everyone ,
we have an with our guest portal page the issue is Once a user tries to access a website, the user is redirected to the authentication page of the policy node. When the user type the credentials, the page shows successful authentication but cannot access internet. When you try access the internet page again, a new login window is displayed,
we are using ISE version 3.1.0 and we have tested the same scenario with same authorization policy on ISE 2.7 everything is working fine.
kindly find the authorization policy in the attached .
i appreciate your help on this .
03-10-2022 12:56 PM
Hi @M.Qadory
Wired or wireless?
I suspect CoA is not working
If it's a switch, then check whether the switch allows CoA from ISE
aaa server radius dynamic-author client ISE1-IP-ADDR server-key <server-key> client ISE2-IP-ADDR server-key <server-key>
If it's wireless, then check whether CoA is allowed from ISE (e.g. a tick in AireOS for RFC3576) - if it's a Cisco 9800 then it will be similar to the switch config shown above.
If it's configured then validate whether the CoA that ISE sends is received by the device, and the response is seen in ISE (tcpdump on ISE)
03-11-2022 09:11 PM
Hi Arne
thanks for your reply, it's a wireless and the device is huawei WLC , i think the issue in ISE 3.1 version because as i mentioned i have configured the same config on ISE 2.7 and it's working normally.
03-12-2022 06:09 PM
Potentially CSCvs95495
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide