cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1047
Views
2
Helpful
5
Replies
Donald Haskins
Beginner

Launch Apple Profile and Certificate Installers Now button redirects to Null

I am attempting to configure a BYOD Portal. 

On the portal, I accept terms and continue to page 3 and Click on the 'Launch Apple Profile and Certificate Installers Now' button.  I am redirected to https://null:8443/auth/cp/errorPage.html.   

The Flow is iPad -> Meraki AP -> ISE

We are running ISE2.2 Patch 1

Any assistance would be Greatly Appreciated.

Thank you,

- donald.haskins@energytransfer.com

1 ACCEPTED SOLUTION

Accepted Solutions
hslai
Cisco Employee

Since you are using a Meraki AP, please ensure following How To: Integrate Meraki Networks with ISE.

Is BYOD working with other Cisco network devices, such as a Cisco Catalyst switch or a Cisco WLC?

After reviewing past internal bugs with similar errors, that is a generic error on ISE client provisioning so the message itself not providing us much info. If possible, please open a Cisco TAC case and engage our Cisco TAC team to help troubleshooting. If you rather debugging yourself, you may enable DEBUG on the components client, guest, provisioning, scep, and ca-service, recreate it and examine the debug log files ise-psc.log with events timestamped during your recreate. You might also follow Quick tip using web inspector to debug mobile safar to check on the download link.

View solution in original post

5 REPLIES 5
hslai
Cisco Employee

Please specify which version/release you are using on the Meraki AP.

The null thing in the URL is likely due to Retry-URL not defined.

Screen Shot 2017-06-19 at 9.22.04 AM.png

hslai,

That was helpful, as I did not have the Retry-URL defined.   I configured the URL for www.google.com, but am still redirected to https://null:8443/auth/cp/errorPage.html.


Thank you,

- donald.haskins@energytransfer.com

Charlie Moreton
Cisco Employee

Have you created a Native Supplicant Profile (Policy > Policy Elements > Results > Client Provisioning > Resources)?

CPP3.PNG

Have you created a Client Provisioning Policy referencing that Profile (Policy > Client Provisioning)?

CPP2.PNG

It sounds like you've already created an Authorization Profile to redirect to the BYOD Portal.  What is in the first dropdown under Web Redirection?

CPP1.PNG

Charlie Moreton
Cisco Employee

Also check to ensure the the Static IP/Host name/FQDN box is not checked with an empty value:

CPP4.PNG

If all of these items have been completed and are set as expected, insert the ip address if the PSN you are trying to reach into the Static IP/Host name/FQDN entry.

hslai
Cisco Employee

Since you are using a Meraki AP, please ensure following How To: Integrate Meraki Networks with ISE.

Is BYOD working with other Cisco network devices, such as a Cisco Catalyst switch or a Cisco WLC?

After reviewing past internal bugs with similar errors, that is a generic error on ISE client provisioning so the message itself not providing us much info. If possible, please open a Cisco TAC case and engage our Cisco TAC team to help troubleshooting. If you rather debugging yourself, you may enable DEBUG on the components client, guest, provisioning, scep, and ca-service, recreate it and examine the debug log files ise-psc.log with events timestamped during your recreate. You might also follow Quick tip using web inspector to debug mobile safar to check on the download link.

View solution in original post

Content for Community-Ad