C9800 Web Auth

[hs08]

Hello,

I try create SSID with Web auth for my guest. When i select 'none' in Layer2 security and tick Web Policy in Layer3 why the SSID is not showing? If i untick the Web Policy in Layer3 then the SSID is showing with open authentication.

[Mark Elsen]

  - If the SSID is  not showing enter the CLI command wireless config validate
    In those circumstances also validate the controller configuration using the CLI command
     show tech wireless and feed the output from that into Wireless Config Analyzer

  M.

[hs08]

I think I have issue with web auth because if I not tick the 'Web Policy' then the SSID is showing.

[Mark Elsen]

  - @hs08       Yet my verification advices remain mandatory tasks to execute,

  M.

[Saikat Nandy]

'show tech wireless' please as well as the ssid name.

[hs08]

the SSID name is SEG-GUEST1

[Mark Elsen]

 - @hs08                 I have had wlc.txt analyzed with Wireless Config Analyzer
                               One of the observed results :

          >...
         >

Webauth: WLAN with webauth configured, but no aaa authorization network command detected. This may be incomplete configuration

Action: For webauth, you should set a network authorization method. For more information: https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/16-11/config-guide/b_wl_16_11_cg/cisco-guest-foreign.html

(

        Use WirelessAnalyzer your self for   viewing all results,   (Wireless Config Analyzer)
                         When making changes use WirelessAnalyzer again!!

  M

[hs08]

hi @Mark Elsen 

I know but want to know if the web auth is not yet complete configured this will make the SSID not visible?

[Rich R · Accepted solution]

From my experience @hs08 yes any inconsistency in the config can prevent the WLAN from being pushed to the AP.

[Mark Elsen]

  - @hs08   I would suppose yes ; configurations must always be complete and correct,

  M.

[Saikat Nandy]

Based on your config, I am not seeing any 'obvious' reason why the SSID won't be visible after selecting None in Layer 2 and enabling Layer 3 in Web Policy. Everything looks to be in place from config perspective. If you ssh into the AP and do 'show dot11 wlan', do you see the SSID as Up?

[Rich R]

There is a LOT more to configuring web auth than just one tick box!

Have you followed all the required steps in the relevant guide?
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-l-wireless-controller/220405-configure-local-web-authentication-with.html
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217457-configure-and-troubleshoot-external-web.html