guest user for webauth not working

[fhk-cwempe]

Hi,

I want to configure a WLAN on my C9800 where users can login via local guest accounts.

I followed this guide:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/web-authentication/b-configuring-web-based-authentication-on-cisco-catalyst-9800-series-controllers.html

But after entering the user credentials I setup up on the controller, I get "Authentication failed".

When I change the webauth type to "consent" I can click the consent button on the captive portal everything works.

Unfortunately, there are almost no logs (syslog) about the login process.
So I have no error message from the controller.

Except a "No response" after the login did not work.

%SESSION_MGR-5-FAIL: Chassis 1 R0/0: wncd: Authorization failed or unapplied for client (xxxx.yyyy.5979) on Interface capwap_90800007 AuditSessionID 027A06xxxxxxxxx8D. Failure reason: Authc fail. Authc failure reason: No Response from Client.

Any idea what I am doing wrong or how I can get more information about my issue?

[marce1000 · Accepted solution]

 - FYI : https://logadvisor.cisco.com/logadvisor/wireless/9800/9800CWA . besides the mentioned tools for analyzing and debugging also have a checkup of the C9800  configuration with the CLI command : show  tech   wireless , have the output analyzed by  https://cway.cisco.com/tools/WirelessAnalyzer/  , please note do not use classical show tech-support (short version) , use the command denoted in green for Wireless Analyzer.               Checkout all advisories!

 M.

[jagan.chowdam · Accepted solution]

What is your AAA Method List configuration?

For Local Login Method List to work, please make sure the configuration 'aaa authorization network default local' exists on the device. This means that the authorization method list with name default must be defined in order to configure local web-authentication properly.

CJ

/*Please rate all useful responses*/

[TRNnHelp]

This was the fix Guest WLAN is now working.  Thank You

[ramiabualhasan]

please suggest how it was fixed,its showing Authintication failed for me

[fhk-cwempe]

See the answer from jagan.chowdam.

As he said, the authorization method list with name default (no other name) must be defined.

If this does not work for you, you might want to open a new thread and give more details about your issue.

[declan liddy]

This fixed my issue

[fhk-cwempe]

Thank you both.

The Wireless Config Analyzer also told me I need the aaa authorization network command.
Looks like I did not follow the guide carefully.

I will try this.

EDIT: It works!