ISE CWA Redirect loop

[david dawn]

Guest Wifi ISE

Afternoon all,  I've been tasked to set up  Guest WIFI.

The bit I'm struggling with is the very last stage,  In summary I'm using Self Register Portal. This Portal allows users to register for WIFI once it is approved and user signs in, it is looping back to the sign in page rather than just connecting them to internet,  I know this is my fault but I'm not sure where I need to edit in ISE to allow them to carry onto being authenticated and then sent to Google page which is what is currently set.

This is my set up, please see pics attached.

To summarise all is working apart from when signing in from portal it just loops back to the portal page:( I think I'm policy set could be wrong to push it to next stage but I'm very new on this so struggling.

Thanks.

David.

[Arne Bier · Accepted solution]

Hi @david dawn 

Your Authorization Policy is missing a Rule. The very fiest rule must be one to check the Endpoint - you can do it either by checking whether the endpoint is in the GuestEndpoints Identity Group (or whatever Endpoint Group you're using), use use the other method that relies on session persistence

Then the next rule after that is the TEST_GUEST_CWA ( redirection) 

The Guest Prescriptive Guide. Very good.

[david dawn]

Hello Arne,

Thank you for the reply, this is working now I understand my error/lack of knowledge in this area lol.

I'll be honest I don't think all these are needed in the Authorisation profile but they are there from me experimenting more than anything.

When I tested yesterday I got to the portal i signed for a account then it go approved manually on admin portal, i logged in and it went in and took me to google.com   I had a issue with Iphones then not loading the captive portal so i did some research and found under WLAN on the WLC you need to disabled captive portal bypass this is something that then allows the redirect page on the iphone to automagically load.

Thanks for you're response.

David.