11-20-2015 07:46 AM - edited 03-10-2019 11:15 PM
Hi ,we implemented CWA for wireless guest access using ISE. However we have an issue, the redirect URL is a name, not an IP address, and the guest dhcp scope use public DNS servers, so CWA doesn't work unless we set the company DNS servers.
Is there any way to configure ISE to send the ip address instead the name for redirection in CWA?
Regards
Solved! Go to Solution.
11-20-2015 07:57 AM
Yes, you can set a static PSN to be used for the redirect in the authz profile:
But, you'll end up with a cert error for the guest user experience unless you have the IPs in the SAN fields of the ISE certificate. I suppose you are adverse to using internal DNS so the guest can properly resolve the PSN hostnames?
Tim
11-20-2015 07:57 AM
Yes, you can set a static PSN to be used for the redirect in the authz profile:
But, you'll end up with a cert error for the guest user experience unless you have the IPs in the SAN fields of the ISE certificate. I suppose you are adverse to using internal DNS so the guest can properly resolve the PSN hostnames?
Tim
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide