cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
903
Views
0
Helpful
3
Replies

Problem with guest pc login and redirection

I'l try to be clear and direct

whan a pc is connected to the network for the first time and fails authentication (as it should) it is meant to be authorized on guest portal with web redirection and it does, everything works like a charm...

but there is a huge problema round the corner... if I disconnect the pc from the lan and then replug the connector it won't do anything it is supposed to do,

the only option is to wait for dhcp lease to run out and then everything turns fine until a new disconnection...

it looks like the switch doesn't catch the pc as being re-connected (maybe because it doesn't ask for a new ip and use the leased one), and no action is applied to the session, the dacl is marked as global (not peer) and webredirection doesn't happen anymore, changing port has the same result

the only difference from cisco document's switch config is that host mode is multi-domain

(and it seems that the session is not terminated by being triggered by the disconnection of the pc)

switch port violation policy is "mac-move"

any clue?

tahnk you all very much for your support

3 Replies 3

Tarik Admani
VIP Alumni
VIP Alumni

Can you post show run interface type x/y, show run | inc aaa. Also the model and version?

Thanks,

Tarik

Sent from Cisco Technical Support Android App

yes

aaa new-model

aaa authentication login default group radius local

aaa authentication dot1x default group radius

aaa authorization exec default group radius if-authenticated

aaa authorization network default group radius

aaa authorization auth-proxy default group radius

aaa accounting update periodic 5

aaa accounting auth-proxy default start-stop group radius

aaa accounting dot1x default start-stop group radius

aaa accounting system default start-stop group radius

aaa server radius dynamic-author

aaa session-id common

model

C2960S

12.2(55)SE2

thanks

Tarik Admani
VIP Alumni
VIP Alumni

Disregard.

Sent from Cisco Technical Support Android App