portal authentication fail

[willwillwang]

i use a other portal authentication server wlc redirect url to client

client input username and password no authentication success

i use wireshark see a fail with certificate 

how can i solve it 

[balaji.bandi]

what kind of Cert you using ? is this valid FQDN ? or Local Certs.

[willwillwang]

use the wlc default cert  and i don't config fqdn in virtual ip (1.1.1.1)

[balaji.bandi]

if the Locally signed CA, get the client cert and install on PC and test.

[Arshad Safrulla]

Username and password doesn't have anything to do with the portal certificate, check whether the

1. local users are created

2. If users are created confirm the credentials.

To create new users you can navigate to Security>>AAA>>Local Net Users

Also consider changing 1.1.1.1 virtual IP as this IP i spublicly routed now. Read below for more info.

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/213535-wlc-virtual-ip-address-1-1-1-1.html

[Scott Fella]

How to fix that is to install a trusted 3rd party certificate and make sure the FQDN used on that certificate is resolvable by the dns servers the guest clients are using.  Have you tried to login to the portal yourself?  You probably get a certificate error from your browser due to using default self signed certificates.

Generate CSR for Third-Party Certificates and Download Chained Certificates to the WLC - Cisco

[willwillwang]

i think install 3rd cer can solve problem

can i disable websecure https to solve problem?

[Scott Fella · Accepted solution]

You can try that, that would stop the error.