cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
546
Views
0
Helpful
2
Replies

cisco ise web auth fails

Anjana A
Level 1
Level 1

Hello,

 

cisco wlc>> 5520>> ios>> 8.5.135.0 

Access point model>>3702i>> Ap mode >> flex connect.

 

Users when trying to connect to guest ssid, which is locally switched the user are getting struck in CENTRAL_WEB_AUTH state.

apfReceiveTask: Nov 24 13:39:40.407: [PA] 24:ee:9a:33:e6:ef 10.10.10.1 WEBAUTH_REQD (8) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 64206  AverageRate = 0, BurstRate = 0

 

*apfReceiveTask: Nov 24 13:39:40.407: [PA] 24:ee:9a:33:e6:ef 10.10.10.1 WEBAUTH_REQD (8) Fast Path rule (contd...) AVC Ratelimit:  AppID = 0 ,AppAction = 0, AppToken = 64206  AverageRate = 0, BurstRate = 0

 

*apfReceiveTask: Nov 24 13:39:40.407: [PA] 24:ee:9a:33:e6:ef apfMsAssoStateInc

*apfReceiveTask: Nov 24 13:39:40.407: [PA] 24:ee:9a:33:e6:ef apfPemAddUser2 (apf_policy.c:423) Changing state for mobile 24:ee:9a:33:e6:ef on AP 5c:5a:c7:90:42:c0 from AAA Pending to Associated

 

*apfReceiveTask: Nov 24 13:39:40.407: [PA] 24:ee:9a:33:e6:ef apfPemAddUser2:session timeout forstation 24:ee:9a:33:e6:ef - Session Tout 36000, apfMsTimeOut '36000' and sessionTimerRunning flag is  0

 

Regards,

Anjana

 

2 Replies 2

are your host get ip address and DNS server ip ?

check this with ipconf 

yes.. ip address/dns users are getting..

Review Cisco Networking for a $25 gift card