Cisco wlc 2504 and external web auth problem

[Denis Orlov]

Hello everybody. Need your help.

I have Cisco WLC 2504.

I was configured one wlan with external web-authentication.

External web server is apache on freebsd.

When user connect to wlan and open web browser, wlc redirects client to external web page, where client must input hist credentials.

When client click "submit" button on external web auth page, wlc initiates RADIUS request to radius server.

Radius server(freeradius) is on the same server, where apache running.

I have following settings for my wlan:

And in the end - my broblem:

sometimes, when client enter credentials on external page and click "submit" button, wlc suddenly redirect client on internal default auth page.

I can't understand such behavior. What I doing wrong? Please help.

[Amjad Abdullah]

Where are you configuring to choose external web auth page? Globally or override global config from under WLAN settings?

Sent from Cisco Technical Support iPad App

[Denis Orlov]

Globally under Security->Web Auth->Web Login Page

Sent from Cisco Technical Support iPhone App

[Scott Fella]

Open a TAC case as this is a know issue even with using a customized downloaded webauth page. The webauth page opens fine, but if the credential are wrong and they hit submit, it redirects to the internal default page. TAC might have a bug id, this only happened on either the 7.0 or 7.2 code... Can't remember.

Sent from Cisco Technical Support iPhone App

[Denis Orlov]

Ok. I will try it. Are you faced with this issue?

[Scott Fella]

What code are you running on the 2504?

Sent from Cisco Technical Support iPhone App

[Denis Orlov]

(CiscoWLC2504) >show sysinfo

Manufacturer's Name.............................. Cisco Systems Inc.

Product Name..................................... Cisco Controller

Product Version.................................. 7.2.103.0

Bootloader Version............................... 1.0.16

Field Recovery Image Version..................... 1.0.0

Firmware Version................................. PIC 16.0

Build Type....................................... DATA + WPS

System Name...................................... CiscoWLC2504

[Denis Orlov]

May be someone faced with such a problem?

[Scott Fella]

I ran into that problem along with some of my peers with a 2504 & 5508 running both 7.0.x and 7.2.x. I just never bothered to open a TAC case.

Sent from Cisco Technical Support iPhone App

[Denis Orlov]

How did you solve this problem?

Can you help?

Sent from Cisco Technical Support iPad App

[Scott Fella · Accepted solution]

Never did, because there is no work around. Again, this only happens if the user fails the initial login. If the user puts in the correct login info, they got redirected to their homepage and not the internal default page.

Sent from Cisco Technical Support iPhone App

[Denis Orlov]

Oh... Thanks a lot for clarifying, Scott!!!

Do Cisco plan to fix this behavior in future?

Have you such information?

Sent from Cisco Technical Support iPad App

[Scott Fella]

I will open a TAC case on that and see if they already have a bug id or if they will create a new one.

Sent from Cisco Technical Support iPhone App

[james.furry]

Hi Scott, how did you go with the TAC case? Did you get a bug ID? I think I've got the same issue with 7.2. The client hits the customised web-auth pass-through page no problems but after hitting the accept button if they browse back they get presented with the internal page and can't get past this.

[Scott Fella]

I have not opened a case yet. Totally forget:) I have an install tomorrow with guest webauth and let me see if the issue still persist.

Sent from Cisco Technical Support iPhone App