cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
19810
Views
12
Helpful
20
Replies

url web-redirect is not working

apatel2489
Level 1
Level 1

i have deployed ISE 2.3 and everythign works fine except client is not getting url redirect page when they open web page on browser.

is there any way that can install manually and doesn't require url redirect. i have copied and paste url from switch port and it worked and compliment but doesn't work automatically.

Thanks

Ashish

20 Replies 20

Hello,

Could you please tell me the command that was introduced for the L2 redirection on IOS-XE?  I am changing VLANs for guest clients there is no SVI for the guests in this network.  The clients L3 interface in a firewall outside of the network.

I would recommend you review the information in the guest guide around this

https://community.cisco.com/t5/security-documents/ise-guest-access-prescriptive-deployment-guide/ta-p/3640475

Your answer fixed my issue.

Thank you very much.

 

Does anyone know why it's necessary to enable the web server for the redirect to work? We want to use redirection in ISE for a quarantine function and be able to redirect user to a "splash page" informing them that their PC is quarantined. However, enabling the web server on the switch is raising security concerns and I am not sure why we need to enable it when we don't use the internal web server. Does it act as a proxy? Anyway to get the re-direction to work without enabling HTTP?

 

Edit. The following commands makes the switch not allow any sessions, so at least it will prevent unauthorized logins. 

ip http secure-active-session-modules none

ip http active-session-modules none

 

 

 

The switch intercepts and does the redirection to the ISE URL. You need something inline to do the redirect. ISE is not inline.

https://community.cisco.com/t5/security-documents/ise-guest-access-prescriptive-deployment-guide/ta-p/3640475

see Configure a Catalyst Switch for Guest Access

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: