NAC - users first access to web unsuccessful

[anasaizgarc]

Hello

We have a NAC appliance with CAM and CAS. When somebody tries to load any external page, he is supposed to get the CAS authentication page. However, what he gets is a "not found" error message. If he types directly the IP of the CAS in the browser, then he does get the authentication page. After the authentication, the user can access to internet properly.

We have tried to recreate the certificates in the CAS but the result has been the same.

Does anybody have some idea about what can be happening?

Thanks

[ciscoforumuser]

Make sure that client can resolve hostname for CAM and cas. Check dns settings on client.

[anasaizgarc]

Thank you for your help. I think the customer has already checked DNS settings, but I'll try to find it out. In the meantime, do you know any other possible cause for this problem?

[michael_dean]

It sounds like the AUTH VLAN traffic is not being sent to the CAS.

Are you configured for as an L3 OOB? If so, you will need to policy route the AUTH VLAN subnet to the CAS Virtual Untrusted address.