Aironet 2700 Series (AIR-CAP2702I-S-K9) Web Authentication

[claytoncheng]

I am using the autonomous AP AIR-CAP2702I-S-K9 (Firmware: ap3g2-k9w7-xx.153-3.JBB5). I want to set up a Guest SSID with web authentication.

First, I had created the vlan, Guest SSID with open authentication which work properly as vlan guest group IP address. 

When I click on the web authentication box, it assigned the guest group IP address directly and no any log in page pop up. As this time, it can't connect to internet under this IP.

May I know more detail about this setting? 

[Prakash Parvathala]

HI

Check this Configuration guide which may be help you

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/116897-configure-technology-00.html

[claytoncheng]

I had followed this setting step. However, it still can't work. No any log in page pop up and assigned the guest group IP address directly.

[claytoncheng]

I had followed this setting step. However, it still can't work. No any log in page pop up. It direct to www.msn.com only. Could you help me to review the setting??

config detail:

version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
!
logging rate-limit console 9
!
aaa new-model
!
!
aaa authentication login default local
aaa authorization exec default local 
!
!
!
!
!
aaa session-id common
clock timezone +0800 8 0
no ip cef
ip admission name web_auth proxy http
ip admission name webauth proxy http
ip name-server 8.8.8.8
!
!
!
!
dot11 syslog
!
dot11 ssid Guest
   web-auth
   authentication open 
   guest-mode
   mbssid guest-mode
!
!
dot11 guest
  username Guest lifetime 60 password 7 115C415546425A
!
!
!
username admin privilege 15 password 7 08154B1B59382C890
!
!
bridge irb
!
!
!
interface Dot11Radio0
 no ip address
 !
 ssid Guest
 !
 antenna gain 0
 stbc
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 ip admission webauth
!
interface Dot11Radio1
 no ip address
 shutdown
 antenna gain 0
 peakdetect
 no dfs band block
 channel dfs
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 spanning-disabled
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
 no ip address
 duplex auto
 speed auto
 bridge-group 1
 bridge-group 1 spanning-disabled
 no bridge-group 1 source-learning
!
interface GigabitEthernet1
 no ip address
 duplex auto
 speed auto
 bridge-group 1
 bridge-group 1 spanning-disabled
 no bridge-group 1 source-learning
!
interface BVI1
 ip address dhcp client-id GigabitEthernet0
 ipv6 address dhcp
 ipv6 address autoconfig
 ipv6 enable
!
ip forward-protocol nd
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
!
radius-server local
  nas 10.130.123.120 key 7 1511021F0725
!
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
 transport input all
!
sntp server 118.143.17.82
sntp broadcast client
end

[Sandeep Choudhary]

Hi,

Please follow this:

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/116897-configure-technology-00.html

Regards

Don't forget to rate helpful posts

[comic.chang1]

Hi Sandeep:

May I ask a question about Cisco2702 AP?

We want to test our DUT's throughput on 2.4G HT40 mode with Cisco2702 AP,

Could you know any images for supporting 2.4G HT40 on Cisco2702 AP? (AIR-CAP2702E-T-K9)

Thanks a lot.

[claytoncheng]

I still can't solve this problem as this instruction. Do you have any other suggestion?