Enable WebAuth on WLC to intercept https (or https redirection) for authentication

[Hai Dao Tuan]

Hi all

My company is using WLC with Guest access feature, and use Layer 3 security authentication to permit only Guests who provided valid user/password to access.

But we met a issue that, when guests connect to Guest SSID successful, on PC they have to open web browser and access to 1 website by http, after that WLC will intercept and redirect to authentication page.

If customer access to https (as google, gmail, ...) WLC cannot intercept and redirect to authentication. Because almost customers access to https://google.com at first by their habit.

On my firewall, I can do intercept by both http and https, so I wonder on WLC I can enable intercepting and redirecting to authentication of https also

If possible, please advice us how to enable this feature.

Regards

Hai Dao Tuan

[Sandeep Choudhary]

Means you did not set any DNS server IP in your DHCP scope.

Try to set any public DNS entry like 8.8.8.8 (Google DNS) and try again.

Regards

[Freerk Terpstra · Accepted solution]

Redirecting https is a new "feature" since AirOS 8.0.100, but you have to run 8.0.110 anyway because of a bug in 8.0.100. See for more information CSCar04580 and CSCur13703.

[Hai Dao Tuan]

Thanks all

I also just found a link that mentions about this case clearly and commands to enable it

https://supportforums.cisco.com/document/12398536/understanding-https-redirect-over-web-auth

(WLC)> config wlan security web-auth enable <wlan-id>
(WLC)> config network web-auth https-redirect enable