Solved: Re: 9800 Foreign 5520 Guest Anchor with Web Passthrough

bjmcveety · ‎02-25-2023

I am having a heck of a time finding information on config setup for "web passthrough" between a 9800 as the foreign and 5520 as the guest anchor. The mobility tunnel between the two is up/up. I know how to setup web passthrough on the 5520 but finding info on the 9800 has not been as easy.

9800 version 17.3.6 and 5520 version is 8.10.182.0.

The clients are not being presented with the AUP, no IP is being issued.

Any help would be greatly appreciated. Thanks

bjmcveety · ‎03-02-2023

Thank you all for the responses and direction! I really appreciate all the input. The issue was the Profile Policy name. As simple as that. The WLAN and Profile Policy need to be the exact same name - which makes sense but I had tried to utilize a single Profile Policy for all the Guest SSIDs - that was a fail.... Changed the Profile Policy names according to the same WLAN names and then magic!

So - issue resolved with a slight change to the config.

Thanks again!

View solution in original post

balaji.bandi · ‎02-25-2023

you need to enable debug and see what is wrong ?

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

marce1000 · ‎02-25-2023

- You may debug clients using these info's : https://logadvisor.cisco.com/logadvisor/wireless/9800/9800CWA , also review the 9800's current configuration with the CLI command : show tech wireless , have the output analyzed by https://cway.cisco.com/tools/WirelessAnalyzer/ , please note do not use classical show tech-support (short version) , use the command denoted in green for Wireless Analyzer. Checkout all advisories!

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Rich R · ‎02-26-2023

And FYI 8.10.182.0 is deferred so if you need TAC support they'll just tell you to upgrade to 8.10.183.0.
And do you have the AP service packs installed with 17.3.6 as per TAC recommended (below)?

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

bjmcveety · ‎03-02-2023

Yes, I upgraded the code on the 5520 and the 9800 the AP service packs had been applied. Thank you

Scott Fella · ‎02-26-2023

Well I just searched up "9800 web passthrough" and found this at the top of the search list. Look through this for reference to make sure everything in the link is present in your setup.

http://www.netprojnetworks.com/cisco-9800-equivalent-of-aireos-webpass-through/

-Scott
*** Please rate helpful posts ***

bjmcveety · ‎03-02-2023

@Scott Fella Yes, I had that link as well. The info did not truly address the nuances with a 9800 with 5520 guest anchor. With the WLAN & Profile Policies things are obviously a little different than 9800 to 9800.

bjmcveety · ‎03-02-2023

Thank you all for the responses and direction! I really appreciate all the input. The issue was the Profile Policy name. As simple as that. The WLAN and Profile Policy need to be the exact same name - which makes sense but I had tried to utilize a single Profile Policy for all the Guest SSIDs - that was a fail.... Changed the Profile Policy names according to the same WLAN names and then magic!

So - issue resolved with a slight change to the config.

Thanks again!

Scott Fella · ‎03-02-2023

Glad you got it working and posting your solution. It is interesting to see how many folks, even me, mess that up. I have always told myself to make sure everything matches 100% and identify items that don't . Once I get it to work, then I tinker a bit to see what I can change and still get it to work. That's me though.... always tinkering and then breaking stuff:)

-Scott
*** Please rate helpful posts ***

bjmcveety · ‎03-02-2023

Yes! I definitely did the same thing once it was working. It makes complete sense that the naming should be exact but "note to self".... Thanks again for the help & feedback!