ISE authentication loop

[smartns04]

Hi,

Our setup is as follows;

1) Cisco ISE

2) WLC2504

3) Guest SSID

Once a user connects to Guest SSID and tries to access a website, the user is redirected to the authentication page of the policy node.We have connected the ISE with our AD and after the user types the credentials, the page shows successful authentication but cannot access internet. When you try access the internet page again, a new login window is displayed. The ISE live authentication page shows successful login. 

Any ideas what to look for?

[Dustin Anderson]

Possibly check that CoA is enabled on the WLC so the endpoint gets the removal of the ACL redirect. This is in the RADIUS setup on the WLC

[michacollins]

If FW's are involved verify rules are allowing CoA.