- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2013 06:23 AM - edited 03-10-2019 07:57 PM
Hello
I have a fault by WLC when i configured a web authentication including Flexconnect ACL so when the guest connect on wifi the url redirected is
https://ISE IP ADDRESS:8443/guestportal/Login.action?switch_url=https://1.1.1.1/login.html&ap_mac=a4:18:75:43:f0:c0&client_mac=e0:06:e6:78:9c:d5&wlan=TestGuest&redirect=www.google.tn/ but if the guest put only this URL https://1.1.1.1/login.html he can put any username and password then access to the internet
Can you help me to resolve this issue
Thanks
Solved! Go to Solution.
- Labels:
-
AAA
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2013 08:18 AM
Ahmed,
Are you doing external web authentication redirect from the wireless lan controller? If so, why not use the redirect and use the CWA method instead.
Please post a screenshot of your L3 settings along with a screenshot of the client entry on the WLC.
Thanks,
Tarik Admani
*Please rate helpful posts*
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-08-2013 08:18 AM
Ahmed,
Are you doing external web authentication redirect from the wireless lan controller? If so, why not use the redirect and use the CWA method instead.
Please post a screenshot of your L3 settings along with a screenshot of the client entry on the WLC.
Thanks,
Tarik Admani
*Please rate helpful posts*
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-09-2013 01:41 AM
Hello Tarik
we used the redirect and the CWA method instead it works thanks but if the redirect occurs the URL display the name of ISE not the IP ADRESS and the guest user must put the dns manually for the first step and after logging to access internet he must put dns dynamic the following is the URL https://DOTISE:8443/guestportal/ so is it possible to redirect with IP Address and with dynamic DNS
Thanks
Ahmed Zniti
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-09-2013 08:04 AM
Hi Ahmed,
Yes this is the behavior of ISE, it will redirect with the hostname and not the ip address. A few users have tried but it doesnt work so well.
I am wondering why you can create a dns record for the ise appliances so your users can get redirected instead of using an ip address?
Thanks,
Tarik Admani
*Please rate helpful posts*
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
01-10-2013 04:07 AM
Hi Tarik,
Is it possible to change the FQDN on ISE because we want to use an external DNS Server
Thanks
Ahmed Zniti
