cisco9800 guest ssid authentication withdna spaces captive portalslow

[ranjiccie]

Hi,

I have recently deployed the wireless controller cisco 9800 AXI, it is hosted in nutanix.

facing the issues is slowness in Guest SSID authentication, for authentication taking time is 3-5 minutes.

controller is hosted in nutanix server,controller is cisco 9800 axi and version is 17.3.4cAcess points are C9120AXI-E

once we connected the ssid its taking time 100 seconds to redirect page captive portal. after receive the otp to open the controller page which is we imported the page taking time again 100 seconds.

[Haydn Andrews]

Few things:

• How long does it take to get an IP address
• Are other SSIDs affected by the slowness to authenticate
• APs in local or flexconnect mode
• WAN between VM infrastructure and AP
• what hypervisor are you running on the nutanix server?
• What does a radio trace of a client connecting show
• have you uploaded the show tech support to the Cisco Wireless Config Analyser
• Is this local web auth (Local Captive Portal Page) or central web auth (Captive Portal On ISE) or Redirected to 3rd party page?
• If you just make the SSID open with no web redirect how long does it take to authenticate.

When you say 100 seconds to redirect, is that from connecting to the SSID or attempting to browse a http web page? As some operating systems it depends on when they poll their http page to discover if its a captive portal.

[ammahend]

you can do a capture easily on WLC as well as on client to see where is the delay, its a pretty standard exchange, it might give you a direction to focus on,  fragmentation, MTU mismatch  can also cause similar slowness.

feel free to share the capture.

most of my deployments have been with onprem controller and onprem dnaspaces connector.