cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
configure & troubleshoot anyconnect
525
Views
10
Helpful
9
Replies
Highlighted
Participant

redirect url

Hi,

What could be the problem if the client is not getting back a redirect url from the wlc ? .

and if Wlc is getting redirect url 

Thanks

Everyone's tags (2)
9 REPLIES 9
VIP Advisor

Re: redirect url

are you using IP or name for redirect url
Participant

Re: redirect url

Hi

I am using fqdn , client can resolve any fqdn including node .

If it is dns issue atleast I could see the something like below on the broswer  

 

  https://psn01.test.com:8443/portal/gateway?sessionId=0a007c0a59feec27000034cd&portal=27963fb0-e96e-11e4-a30a-005056bf01c9&action=cwa&token=9a7eb36c3ca61138c6adba47c9b23cde

 

In my case  Ican't see anything like that above 

Thanks

ajc Frequent Contributor
Frequent Contributor

Re: redirect url

Check wlc coa configuration on AAA Radius authentication,

Check SSID -- advance --- radius nac and aaa override

Check WLC preauth ACL pointing to the PSN on 8443

IF you are using an F5 solution, the static FQDN option does not work properly.

 

 

 

 

 

 

 

Participant

Re: redirect url

Hi,

Sorry .It's not static fqdn

Thanks

Participant

Re: redirect url

Hi,

Here is the preauth acl

 

ip access-list extended redirect_acl
deny udp any any eq bootps
deny udp any any eq bootpc
deny udp any any eq domain
deny ip any host 192.168.5.41 (ise)
deny ip any host 192.168.5.42
permit tcp any any eq www
permit tcp any any eq 443

Thanks

ajc Frequent Contributor
Frequent Contributor

Re: redirect url

We are using hotspot portal, sponsor portal for guest account creation, guest webauth portal (WLC URL Redirect), etc with no issues. Try to keep it simple. AND Mohammed is correct.

 

The preauth acl is intended to keep the communication ONLY between enduser and ISE/DNS so no navigation is involved at all until your AUTHC/AUTHZ is completed (including AUP page accepted if it applies).

 

ACL.png

VIP Advisor

Re: redirect url

You need to make sure that the interface cwa url configured resolve to wlc
virtual interface IP.
Participant

Re: redirect url

Hi,

I could not follow what you have said ,Can you  explain 

Sorry for that 

Thanks