Guest Portal Broken after upgrading to ISE 2.7

[BrooksBlakely]

So upgraded to 2.7 from 2.4.   Guest portal and redirection not working now.

Just allows internet access without pop up page.

When I run the Portal test URL this fails.

The bind is correct to Gi1 but if I change it to Gi0 the test page works but this is not the correct interface the webpage is supposed to be listening on.

[Mike.Cifelli]

Did you upgrade to the flat 2.7 version? I know there are several bugs that could be triggering your issue.  Maybe consider upgrading to patch2 to see if that resolves the issue.  Note that patch3 is hitting the streets in Feb 2021.  Lastly, engage with TAC as there may be a suggested workaround if you are unable to upgrade.  HTH!

[Arne Bier]

I have a theory - upgrading a node involves a reboot of the node ... and if you had done any CLI work on your PSN and you didn't save those changes, then you will silently lose those changes (upgrade will not save the unsaved CLI changes). I have experienced this first hand after having made some ip static routes that "got lost" after upgrade. Since you mentioned Gig1 interface, what are the chances that you are also using a host alias for gig1 IP address ?

ip host <ip address> <FQDN>

[christianbernhardt2 · Accepted solution]

Take a look at CSCvz93230

'Guest portal does not load if hosted on a different interface from Gig0'

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvz93230

Cisco-TAC says that this will be repaired with ISE 2.7 patch 7

They may also send you a hotfix for only this bug for your ISE version.