In our lab, the wired Guest CWA redirect works well with 3750v2 switch. When we use the same configuration in the production ISE nodes, strangely, the Radius av pair disappeared in the Radius response.
The Guest Redirect policy is hit. The GUEST-REDIRECT ACL is called out. the av-pair for the url is just missing. The authorization profile has the CWA configured. Even we changed it to a static IP, it is still missing.
On the switch show auth session, the Server Policy portion is missing as well. No Redirect ACL nor the url.
The only difference between the lab and the production is that the production ISE nodes are behind the F5.
