Fault on https://1.1.1.1/login.html

[Ahmed Zniti]

Hello

I have a fault by WLC when i configured a web authentication including Flexconnect ACL so when the guest connect on wifi the url redirected is

https://ISE IP ADDRESS:8443/guestportal/Login.action?switch_url=https://1.1.1.1/login.html&ap_mac=a4:18:75:43:f0:c0&client_mac=e0:06:e6:78:9c:d5&wlan=TestGuest&redirect=www.google.tn/ but if the guest put only this URL  https://1.1.1.1/login.html he can put any username and password  then access to the internet

Can you help me to resolve this issue

Thanks

[Tarik Admani · Accepted solution]

Ahmed,

Are you doing external web authentication redirect from the wireless lan controller? If so, why not use the redirect and use the CWA method instead.

Please post a screenshot of your L3 settings along with a screenshot of the client entry on the WLC.

Thanks,

Tarik Admani
*Please rate helpful posts*

[Ahmed Zniti]

Hello Tarik

we used the redirect and the CWA method instead it works thanks but if the redirect occurs the URL display the name of ISE not the IP ADRESS and the guest user must put the dns manually for the first step and after logging to access internet he must put dns dynamic the following is the URL https://DOTISE:8443/guestportal/  so is it  possible to redirect with IP Address and with dynamic DNS

Thanks

Ahmed Zniti

[Tarik Admani]

Hi Ahmed,

Yes this is the behavior of ISE, it will redirect with the hostname and not the ip address. A few users have tried but it doesnt work so well.

I am wondering why you can create a dns record for the ise appliances so your users can get redirected instead of using an ip address?

Thanks,

Tarik Admani
*Please rate helpful posts*

[Ahmed Zniti]

Hi Tarik,

Is it  possible to change the FQDN on ISE because we want to use an external DNS Server

Thanks

Ahmed Zniti