ISE URL Redirection on IOS-XE

[Mohsin_Mohamed]

Symptoms

Downloadable ACL (dACL) does not take effect on the IOS-XE Network Access Devices

Diagnosis

Creating redirection ACL on the IOS-XE device failed to redirect the specified traffic for captive portal redirection

Solution

Enable device tracking, Below is an example. Stuck on this for days. Hope this helps anyone in the same situation.

 !

device-tracking policy policy1
trusted-port
tracking enable
vlan configuration 1-4094
device-tracking attach-policy policy1

!

ip access-list extended ACL-WEB-REDIRECT
deny udp any any eq bootpc
deny udp any any eq bootps
deny tcp any host <ISE-IP>
deny udp any any eq domain
permit ip any any

!

[nehakakar]

Check this out

https://community.cisco.com/t5/security-knowledge-base/configuring-posture-services-with-the-cisco-identity-services/ta-p/3154278