Error while connecting to ISE for guest authentication

[rys]

Hi friends,

I attached an image which is getting while some of our users try to connect to Guest SSID using their mobiles.

It seems the issue is to Apple device users ?

Have anyone of you encountered any issue like this.

Appreciate if you could help on this.

Thanks

Riyas Rasheed

[jan.nielsen · Accepted solution]

Sounds like you are redirecting to an ip address, instead of the fqdn of the ise server, that will give you errors like this.

[rys]

Not facing this issue while connectin other any Android or Windows devices.

Also not all Apple devices have this issue.

The users having issue uses IOS 6 and upon connecting to Guest SSID getting this error.

Thanks

[jan.nielsen]

Does your certificate have any entries that point to an ip address like a san field or something else ?

Otherwise, it could be some issue with the Captive network assistant in iOS 6, from that screenshot, you didn't enable the captive portal bypass feature on the WLC, which can cause strange errors for iOS devices on wifi, and will give users many problems when trying to get on the wifi. 

Command for the WLC :

config network web-auth captive-bypass enable

needs a reboot to be enabled.

[rys]

Thanks Jan.

We have added this to WLC and rebooted, later users having issue are able to access.

But today again one user had this issue.

WLC is using ver 7.4 and ISE 1.4 with Patch 3

Anyother we need to verify.

Thanks