Captive Portal

guahaha658 · ‎01-23-2025

Hello!

When i open my guest network i did with web authentication in WLC 5520 to show a page and to click accept, in order to connect to the internet.
But when the website opens it shows the mesagge above "the connection in this website is not secured". I want that this message dont show up again.

Do you know what i should do?

I am a student and i am in the school network. And then i have to put this wlc and the networks in a hospital but i should firstly correct it here.

Please help!

MHM Cisco World · ‎01-23-2025

This message is normal since wifi client dont have CA signed the cert. Of WLC portal.

MHM

Rich R · ‎01-23-2025

The only way to avoid that message is to use a certificate issued by a public PKI root or subordinate Certificate Authority which matches the fully qualified domain name (FQDN) of the captive portal domain name (not IP address). That way the client can trust the certificate. If you use IP address for URL or self signed certificate then no modern client will trust it.

------------------------------
Please click Helpful if this post helped you and Select as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's and TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's, Best Practices for 9800 WLC's and Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

vishalbhandari · ‎01-23-2025

@guahaha658 The message "The connection to this website is not secured" appears because the web authentication page uses HTTP instead of HTTPS, or the certificate on the WLC is not trusted by the client devices. To fix this, you should install a trusted SSL certificate on your WLC. Obtain a certificate from a trusted Certificate Authority (CA) that matches the FQDN of your WLC and upload it. Ensure client devices can resolve the WLC's hostname to its IP address using DNS. This will prevent the security warning and provide a secure experience for users.