cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1101
Views
1
Helpful
4
Replies
Highlighted
Cisco Employee

Support for VRF Aware HTTP Redirection for Guest/CPP

Hello,

Trying to get Guest/CPP redirection working on a 3850 running 03.07.05.E. My .1x client VLAN is using a VRF and I can access the URL if I manually enter the redirect URL, I just cant get it to automatically redirect. I came across this from a previous discussion:



https://supportforums.cisco.com/discussion/12751816/guest-separate-vrf-support-http-redirection-switch-vrf#comment-12098…

Seems like a known issue but even upgrading to 3.7.5 didn't resolve the issue. Anyone else seen this?

JP

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

The VRF aware URL redirection is fixed from 3.7(2)E via CSCuu28069

You need to have IBNS 2.0 configuration on the switch and the following commands are necessary:

parameter-map type webauth global

webauth-vrf-enabled

Hope this helps,

-Hari

View solution in original post

4 REPLIES 4
Highlighted
Cisco Employee

The VRF aware URL redirection is fixed from 3.7(2)E via CSCuu28069

You need to have IBNS 2.0 configuration on the switch and the following commands are necessary:

parameter-map type webauth global

webauth-vrf-enabled

Hope this helps,

-Hari

View solution in original post

Highlighted

The document you included doesn’t mention anything about the VRF config. Please advise.

Highlighted

Related bugids but they all point to same requirement to allow for a local redirection without reliance on global routing table...

CSCsz61106  WebAuth fails to function correctly with VRF-based VLANS


CSCuq77696 ISE in a VRF - managed Services environment

CSCug97543  WebAuth fails to function correctly with VRF-based VLANS.


/Craig

Highlighted

At the time when that document was written, this issue wasn't resolved. You need the combination of the config in that document plus the two commands I have specified above for this to work. We will work on a composite guide some time in the near future.

Cheers!

-Hari

Content for Community-Ad