cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
852
Views
0
Helpful
1
Replies

Client Provisioning URL

latenaite2011
Level 4
Level 4

Does anyone know how to change the URL so that it uses an IP address instead of using a hostname?

I can see it in the log that it is try to use the hostname of the ISE server instead of an IP (I just have a lab environment so DNS isn't working properly).

 

For example, 

 

This is what shows up in the authorization profile

cisco-av-pair = url-redirect=https://ip:port/portal/gateway?sessionId=SessionIdValue&portal=40f01bd0-2e02-11e8-ba71-005056872c7f&action=cpp

 

but the details in the log show:

 

url-redirect=https://iselab.testlab:8443/portal/gateway?sessionId=C0A8015D0000019704222318&portal=40f01bd0-2e02-11e8-ba71-005056872c7f&action=cpp&token=6ada0bce3d88af57bf5e83f87e0e35e4

 

Secondly, when I disconnect and reconnect the cable, I don't see the Anyconnect client or the compliance check happening on the Anyconnect window.  Nothing is happening on the Anyconnect client at all.

 

Does anyone know why?

1 Reply 1

latenaite2011
Level 4
Level 4

Ok, when I connect, the Anyconnect client says there Web authentication is required and when I open Chrome or IE, it just browsers up the browser to Google.com.  I don't get anything.

 

When I try https://ise-hostname:8905/auth/discovery, I get an SSL error message and I accept it and nothing happens.