Client connectivity Issue

[Prasan Venky]

Hello All...

We have two wlc (5508) configured Foriegn/Anchor method. Mobility tunnel is up, eping & mping were successfull. We configured external DHCP and DNS at the anchor end. web authentication (we use ISE) at L3 level was configured. But when client tries to connect, it gets the IP assignment from dhcp, but it is not getting redirected. When nslookup for any URL also, 'DNS Request timed out' error comes. Any suggestions where exactly i have to check...

KVS

[grabonlee]

Hi,

Is the web portal going to be from the ISE or the WLC? If you set up the ISE as both the web authentication portal and Sponsor Portal, then you need to change the Web Authentication Type on the WLC to External Server with and type the DNS resolvable address of the ISE Sponsor portal that you may have created.

If you are using the ISE as the authentication server only and WLC as the the web redirect portal, then only the ISE IP address specified as the Radius server is sufficient.

Finally, you need to check if your DNS server is actually up