Sponsored Guest Disassociates after Success Page

[TH09]

Hi Experts,

We have a SDA environment, the Sponsored Guest Portal (Login Page) is created and pushed by DNAC to ISE. The behavior we are seeing is every time our wireless guests connect to the network, they complete the sponsor flow and also see the success page but they are disassociated immediately after connecting. 

See some outputs attached. The guest would connect, session will form and then disconnect.

We are using DNAC 2.2.2.4, ISE v3 P2 and WLC 9800 16.12.4a.

Any idea?

Thanks.

[Haydn Andrews]

No attachments.

Couple of things the DNAC and WLC versions are not the Cisco recommended version.

Confirming the user associates, gets an IP address, completes the portal and goes to RUN state before the disconnect? Confirming that either ISE is returning a valid IP Pool and SGT or there is a static one assigned in DNAC for the Guest SSID as well.

[TH09]

Heres the attachment.

We will be upgrading the WLC soon. The user gets an IP and completes the portal but I believe stays in webauth state and disconnects. Theres one statically assigned on DNAC and that same one ISE uses in the Auth profile that assigns the user to that VN and assigns the SGT.