cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1455
Views
3
Helpful
4
Replies

Captive Portal with ISE

marcos1377
Level 1
Level 1

I'd like to open a TAC for captive portal configuration between a Cisco Catalyst WLC 9800CL version 17.3.5a and a Cisco ISE VM - version 3.1.0.518, the correct configuration occurs between the ISE and the WLC, as per the prints, but there is no navigation, even after authentication via captive portal. There is IP distribution, but there is no connection, we have already configured the ACL, allowing all traffic and even it does not connect. I would like to know if there is any version incompatibility or if there is something specific to this configuration. Apparently the WLC is not performing the routing due to some problem or configuration.

1 Accepted Solution

Accepted Solutions

marcos1377
Level 1
Level 1

Thanks for all of answers, follow below procedure that fix the problem:

marcos1377_0-1683286845262.png

marcos1377_1-1683286878669.png

marcos1377_2-1683286900337.png

marcos1377_3-1683286931300.png

marcos1377_4-1683286939308.png

View solution in original post

4 Replies 4

Hello

Raise a tac case is always a good idea. But, on the tests I did not see, on the prints, if the client is able to ping the gateway or something on the internet like 8.8.8.8 for example. So, it is not clear when you say no nagivation if you are facing a problem with connectivity or some DNS issue.

  It is not expected that the WLC perform routing but , for guest access, I believe you might have interface vlan on the WLC and on the Core and the Core, as the gateway should send the traffic to your internet gateway. 

 

 

marce1000
Hall of Fame
Hall of Fame

 

 - Have a checkup of the  WLC 9800CL configuration with the CLI command show tech wireless , have the output analyzed with : https://cway.cisco.com/wireless-config-analyzer
            Also use these tools for troubleshooting : https://logadvisor.cisco.com/logadvisor/wireless/9800/9800CWA
            You can also do client debugging according to :https://logadvisor.cisco.com/logadvisor/wireless/9800/9800ClientConnectivity 
                  You can have client debugs analyzed with : https://cway.cisco.com/wireless-debug-analyzer

 M.



-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
    When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Rich R
VIP
VIP

You show a screenshot of the ISE client details but not the WLC.

What is the client status on WLC after you complete login?

Take note of the various links below.

marcos1377
Level 1
Level 1

Thanks for all of answers, follow below procedure that fix the problem:

marcos1377_0-1683286845262.png

marcos1377_1-1683286878669.png

marcos1377_2-1683286900337.png

marcos1377_3-1683286931300.png

marcos1377_4-1683286939308.png

Review Cisco Networking for a $25 gift card