Redirect to web authentication not working on Cisco 5508 Wireless Controller

[rayost]

Hi,

I have a wlan with web authentication:

http://i55.tinypic.com/w145zk.png
and

http://i51.tinypic.com/344sfm0.png

When I connect to  the SSID (I get correct IP from the Cisco 5508 Controller) and try to  surf, I do not get redirected to the web authentication page (https://1.1.1.1/login.html), when I manually insert the URL I get "cannot display the webpage". Any idea?

The virtual interface is 1.1.1.1.

Here is a screenshot of interface and internal dhcp:

http://i52.tinypic.com/2vkm1d2.png

Any idea why clients are not redirecting?

Thanks!

[dmantill]

can you try using internet explorer?

Make sure that DNS is mapping the same name that you set under the virtual interface configuration with the IP address 1.1.1.1

Other than than... maybe a reload? of not then try with HTTP only (disable HTTPs and SSL+reload )  and see how it goes...

btw, the IP address of the guest interface is within the pool range... change that IP address... possible duplicate ip?

[rayost]

Thanks for the reply dmantil!

When I changed the Virtual DNS name to 1.1.1.1 (the same as the IP) I get redirected if I use http://198.133.219.25, but not with http://cisco.com, I get redirected only if I use IP.

I forgot to mention that the controller is in a lab with no access to DNS server. Does the controller check if the domain is valid before redirecting users? I cant find any documentation on how the controller redirect users.

[dmantill · Accepted solution]

do not type an IP on the virtual interface DNS name :-s It will just confuse more the clients...

Hmmm, so basically, just leave it empty and see if it works for you...

However it is recommended, almost mandatory to have a DNS that can be intercepted by the WLC. The redirect works when the WLC receives and change the packet from the DNS and it just resend it with the virutal IP adrress name and then the DNS showuld reply again with the virtual IP address...

Reload the WLC after any change on this feature..

[rayost]

If the controller fails to take domain lookup, it will not redirect the user (strange). Worked when I configured a test DNS server.

[dmantill]

Yes basically its because it needs a DNS to perform the redirect...