Change Webauth Consent page to HTTP

[shawn.pattison]

 We have two Cisco Catalyst 9800-L-F WLC's in HA config.

We setup a Guest wireless SSID with a custom WebConsent page.

Currently when a use accesses the SSID it takes them to a "Your connection is not private" HTTPS page.

We don't need HTTPS on our Guest SSID.  Can this be changed to HTTP instead?  

[marce1000]

 - Try :  9800#configure terminal
            9800(config)#parameter-map type webauth global
             ....
            9800(config-params-parameter-map)#secure-webauth-disable
            9800(config-params-parameter-map)#webauth-http-enable

 M.

[shawn.pattison]

Thanks!  We will give this a try.

[balaji.bandi]

Personally i would not advise to use http for guest network - this will bring security Risk.

[shawn.pattison]

Thank you but our current WLC is configured with HTTP for the Guest SSID Consent page.

[Rich R]

If you're going to use http that makes it completely insecure (anybody can sniff the unencrypted packets over the air) so what's the point of even using web-auth in that case?

Just have an open SSID that anybody can join and use without any web-auth. 
If you're going to use web-auth then you should be doing it securely.

[shawn.pattison]

This is how one of our VP's wants it setup, with a splash page, a disclaimer and a consent button.  This is how it was setup by previous network admins, this is the way they want it setup on the new controller.  I don't make the decisions; I just make them happen.

[jspilde]

Reviving an old thread. If no user personal info is gathered, and the portal is only requiring consent to the terms of service to proceed, is an SSL cert really necessary technically? With the industry moving to 100 day certs in 2027 and 47 day certs in 2029, that's a lot of maintenance for local webauth configurations.