This document explains support for the Apple mini-browser for use in BYOD/Guest Flows using ISE 2.2. ISE has official support for Apple iOS and macOS to use with Guest and BYOD in ISE 2.2 and later. Some of these examples talk about using DNS based ACLs with your REDIRECT_ACL so be sure you WLC supports this.
CSCuv74219CSCus61445 - DNS-based ACL does not work. The bug is fixed 188.8.131.52 and 184.108.40.206 (check other versions as well)
If you want to have seamless flow for guests using mini-browser along with BYOD on the same controller then you can use one of the following options:
8.4 code will allow per WLAN captive portal bypass, see below
Dual SSID flow (open network for guests and employee BYOD), allows open network with mini-browser for guest/byod and then suppressed mini-browser in the BYOD flow
Single SSID BYOD - Use DNS based ACLs for the ACL_BYOD_REDIRECT and add URL captive.apple.com, ACL_GUEST_REDIRECT will redirect everything except for
8.4+ WLC code
You can have Open Guest network with no suppression (captive portal bypass disabled) of mini-browser and Single SSID network for BYOD suppressing (captive portal bypass enabled) the mini-browser.
Since we now support the mini-browser with ISE 2.2 there is no need to enable captive portal bypass on the controller. The client connects to the guest network and the mini-browser will pop and auto-login.
For single SSID there is no change in the behavior as the client is directed to go through the flow once and understand they must launch the browser. You will want to enable captive portal bypass per the options above or use DNS
I'm part of IT for a major company that uses Cisco AnyConnect Secure Mobility Client ver. 4.4.02039 and I've got a problem I can't figure out. One of my remote users uninstalled the program and needs to re-install it, but it routinely fails. When working ...
hi fellows can anyone tell me if ise can get some attribute to put nad inside some Identity group automatically?i have ten differen ciscot switches models in my campus , and i want to create different policies based on switch model, but a...
I was going over the following two communities guide:https://communities.cisco.com/message/276046#276046https://community.cisco.com/t5/security-documents/guest-hotspot-with-max-2-hours-network-access-per-day/tac-p/3891027#M6430I have some questions:1. Is ...
Is there a fix for a 3rd party camera (Axis 1765LE) viewed in VSOM 7.11.1 that keeps going dark every 33 seconds? Each time, the loss of signal message is showing, "Attempting to reconnect...". This problem only exists in VSOM. When viewed direc...