after upgrade 7.6.130.0 web authentication problem

[contratosittigo]

Hi,

I have upgraded my WLC to 7.6.130.0. After that the L3 web auth feature seems not to be working.

I have tried with customized and default web auth page, also open directly the https://1.1.1.1/login.html but only error page.

When I use a mobile device it detects that the SSID nets web authentication, but once I try to login the WLC is redirecting the authentication to a

wireless.mydomain.com

that always is unavailable

I would apreciate your help

regards

Sergio Prado

[ali aqrabawi]

can you share "show network summary"

have you tried different browsers different clients ? 

[contratosittigo]

Hi,

Attached the required:

(Cisco Controller) >show network summary

RF-Network Name............................. DefaultTigo
Web Mode.................................... Disable
Secure Web Mode............................. Enable
Secure Web Mode Cipher-Option High.......... Disable
Secure Web Mode Cipher-Option SSLv2......... Disable
Secure Web Mode RC4 Cipher Preference....... Disable
OCSP........................................ Disabled
OCSP responder URL..........................
Secure Shell (ssh).......................... Enable
Telnet...................................... Disable
Ethernet Multicast Forwarding............... Disable
Ethernet Broadcast Forwarding............... Disable
IPv4 AP Multicast/Broadcast Mode............ Unicast
IGMP snooping............................... Disabled
IGMP timeout................................ 60 seconds
IGMP Query Interval......................... 20 seconds
MLD snooping................................ Disabled
MLD timeout................................. 60 seconds
MLD query interval.......................... 20 seconds
User Idle Timeout........................... 300 seconds
ARP Idle Timeout............................ 300 seconds

--More-- or (q)uit
Cisco AP Default Master..................... Disable
AP Join Priority............................ Disable
Mgmt Via Wireless Interface................. Disable
Mgmt Via Dynamic Interface.................. Disable
Bridge MAC filter Config.................... Enable
Bridge Security Mode........................ EAP
Mesh Full Sector DFS........................ Enable
AP Fallback ................................ Enable
Web Auth CMCC Support ...................... Disabled
Web Auth Redirect Ports .................... 80
Web Auth Proxy Redirect  ................... Enable
Web Auth Captive-Bypass   .................. Disable
Web Auth Secure Web  ....................... Enable
Fast SSID Change ........................... Disabled
AP Discovery - NAT IP Only ................. Enabled
IP/MAC Addr Binding Check .................. Enabled
CCX-lite status ............................ Disable
oeap-600 dual-rlan-ports ................... Disable
oeap-600 local-network ..................... Enable
oeap-600 Split Tunneling (Printers)......... Disable
WebPortal Online Client .................... 0
mDNS snooping............................... Disabled
mDNS Query Interval......................... 15 minutes

The symptom is the same in tablets, laptos,  both with different browsers.

Thanks for your reply

[abwahid]

Hi,

Give one try by flush and reset a client resolver cache and then check.

[contratosittigo]

Yes I have tryed,

Cleaning cache, it seems to be a problem for all users.

regards

Sergio prado

[gohussai]

By default it use "https"  ,try to manual put "http" before mentioning the credentials on Web portal.

[mohanak]

Note about HTTPS Redirection: By default and in the 7.x versions and earlier, the WLC did not redirect HTTPS traffic. This means that if you open your browser and type an HTTPS address, nothing happens. You must type an HTTP address in order to get redirected to the login page which was served in HTTPS.

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/115951-web-auth-wlc-guide-00.html