cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2241
Views
10
Helpful
1
Replies

Guest Users issue

benolyndav
Level 4
Level 4

Hi

 

Once guest wireless users have authenticated ISE doesn’t take them to the url anymore it used to, it takes some users on some devices back to sign in page and other users on other devices it says page was not reachable  does anyone have any idea where I should start looking into this issue. ISE 2.4

see attached

 

Thanks

 
 

 

 

 

1 Accepted Solution

Accepted Solutions

CarlCarlson1234
Level 1
Level 1

Based on the information available from your post, this sounds like a logic issue with your policy sets.  If a guest user authenticates and gets sent back to the guest login portal, that usually indicates your guest policy isn't checking for "network usecase equals guest flow", which gets inserted into the session when a user successfully authenticates a guest flow.  You should have a guest policy that checks for this and then permits access/does not apply the redirect acl. As for the "page is not reachable"  to me that sounds like the device is trying to load a site from cache, not 100% sure this info is accurate.

 

I would test authentication then look at the live logs for the endpoint.  Validate that the device is actually hitting an authorization policy that permits access and isn't looping through the guest forward result.

View solution in original post

1 Reply 1

CarlCarlson1234
Level 1
Level 1

Based on the information available from your post, this sounds like a logic issue with your policy sets.  If a guest user authenticates and gets sent back to the guest login portal, that usually indicates your guest policy isn't checking for "network usecase equals guest flow", which gets inserted into the session when a user successfully authenticates a guest flow.  You should have a guest policy that checks for this and then permits access/does not apply the redirect acl. As for the "page is not reachable"  to me that sounds like the device is trying to load a site from cache, not 100% sure this info is accurate.

 

I would test authentication then look at the live logs for the endpoint.  Validate that the device is actually hitting an authorization policy that permits access and isn't looping through the guest forward result.