WAP321 and Captive Portal Issue

[gnurph69]

I have a WAP321 that I want to designate for guests. The WAP is trunked to a Cisco 2960 via the native VLAN, and the switch is trunked (Etherchannel) to the inside interface of an ASA 5512.

The WAP has a static IP address of 10.1.1.20/16, with default values for Untagged and Management VLAN ID's (VLAN1). Guests are on VLAN ID 108. DHCP is provided by the ASA.

After completing the configuration of the Captive Portal (Instance Association on VAP0), and connecting to the Guest SSID, I'm able to get an IP address from the firewall, but cannot access any web page. I'm not using RADIUS for authentication, and all users/groups were created locally. Verification is set to Local.

When I attempt to access a webpage, one of two things happen:

1. I receive "Page cannot be displayed"
2. I get re-directed to the WAP IP address Captive Portal (http://10.1.1.20/cp.cgi?action=captive), but recieve "Page cannot be displayed"

The wierd thing about this is that if I disassociate the instance from VAP0 and connect to the Guest SSID, I can access any webpage without any error. It's only when I associate the Captive instance to the VAP is where I begin to face issues.

I've tried this on a second WAP (same model) and experienced the same issues. Both WAPs are currently on firmware version 1.0.3.4.

Any ideas?

[gnurph69]

Update: I performed a factory reset and reconfigured the WAP. Once I connected to the Guest SSID, and opened my browser, I was redirected to the Captive Portal. This issue that I'm seeing now is that all the images are broken.

[lariasqu]

Hi gnurph69, thank you for using our forum, my name is Luis I am part of the Small business Support community. Could you please use a different browser such as Mozilla, i.e 9.0, those are better to get in to administrate your device.

Please, let me know if that work for you.

Greetings,

Luis Arias.

Cisco Network Support Engineer.

[Alex Proveaux]

I am having a very similar issue. The captive portal page looks identical to the screenshot posted above.I was given the following steps to follow by someone from cisco small business support:

Rebooted to factory default

1. Enable Wireless Radio

2. Create a Local Group

3. Create a Local User

4. Create a CP Instance

5. Associate the CP Instance to a VAP (SSID) Interface

6. Create a locale (web Page and map it to a CP Instance)

7. Enable Global CP configuration

After following these directions I had the same result in the following browsers:

IE9 9.0.8112.16421

Firefox 21.0

Chrome 27.0.1453.116

[Eric Moyers]

Hi, My name is Eric Moyers. I am a Network Support Engineer in the Cisco Small Business Support Center. Thank you for using the Cisco Community Post Forums.

Could you take a snapshot of the settings you have on the page where you are doing the redirect? I would like to look at them.

You can send it to my email which you will find when you mouse over my picture.

Thanks

Eric Moyers    .:|:.:|:.

Cisco Small Business US STAC Advanced Support Engineer

CCNA, CCNA-Wireless

866-606-1866

Mon - Fri 09:00 - 18:00 (UTC - 05:00)

*Please rate the Post so other will know when an answer has been found.

[lariasqu]

Hi Alex, I did an intensive research and I found information about this bug. The issue should be resolved with the last firmware 1.0.3.4, if you are using this firmware the next step is update the Java, if this doesn't work, could you please reach out to our Small Business Support Center and open a Service Request to address this issue? One of our Engineers may be able to work with you and diagnose the root cause. You can find the appropriate contact information for SBSC in the below link.

http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html

Thank you for using our forum, I hope you find this answer useful

Greetings,

Luis Arias.

Cisco Network Support Engineer.

[Alex Proveaux]

Thanks for the quick reply guys,

It looks like my issue was that the PC I was using to test with this access point had both a wired and a wireless connection to the same network(I had to test this setup remotely so this was to ensure I didnt completely lose access to the test PC). The captive portal page does not appear to fully load when it is accessed through the ethernet interface of the access point. The page failed to load correctly when I tried to reach /cp.cgi?action=captive manually from a wired PC to an access point in our production network as well. In my case got the access point in my test environment to load correctly by manually adding a route to the access point with a better metric for the wireless interface. Under normal circumstances this wouldnt be an issue.