9800 CL Redirect ACL Not Working

[calluuml]

I am trying to create a hotspot portal (passthrough web auth) and the redirect ACL is not working and the client is gaining full access. 

The ACL has been created on the WLC, pushed to the AP via the Flex profile and I can see the URL redirect ACL has applied to the client. 

I will attach a copy of the redirect ACL. 

We do run dual stack so I am thinking maybe the IPv6 traffic is getting out as normal however in ISE there is only 1 ACL to supply via the av pair, is there a way to send another for IPv6?

Thanks,

[rschwart]

Have you found a solution to this?

[craig.beck]

Have you tried disabling IPv6 on the client temporarily to test whether the IPv4 ACL is doing its job correctly?

If the IPv4 ACL works you may be able to work around the IPv6 issue by configuring an IPv6 ACL as a pre-auth ACL, then use AAA override to send a different IPv6 ACL when the client authenticates (assuming you're using RADIUS).