Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
ISE 2.3.0.298
Cisco IOS 15.0(2)SE11
Cisco 3750G allowing full network access even though 'show auth sess int' conveys that the switch should be redirecting traffic to guest web portal. I also see hits on the redirect ACL.
How can I troubleshoot...
I don't fully understand the flow of packets nor the sources of the packets when redirection occurs...When I take the firewall out of the picture redirection occurs fine.
What I can say is that the client traffic flowed through the firewall. The sw...
I know the portal is functioning because if I manually input the Redirect URL from the 'show auth sess int' command into the browser on the client I can authenticate against AD and CoA occurs and places me on the correct VLAN.
The host is not resolving lab-ise-pri.labratory.local. Changed the authorization policy to point to ISE's IP as opposed to hostname. Still a no go. No redirection:
LAB-S3750-1#Mar 19 18:21:51.528: %AUTHMGR-5-SUCCESS: Authorization succeeded for cl...
