SSID stopped broadcasting

[Mash.zafar.1]

Hi All,

Can any one guide me what  i am doing wrong here. I am trying to enable web auth on my one SSID and followed all the steps carefully to enable it correctly. But as i enable the option of web auth in layer 3 option in WLC i noticed that AP stopped to broadcast my that SSID on which i enabled Web auth. Please guide me further to make it right.

Regards,

Mash.Zafar

[ammahend]

whats the controller model/version, paste the running config of current non working configuration. 

[Mash.zafar.1]

Hi ammahend,

Controller model is 9800 and version is 17.9 and i have also attached the config file.

Regards,

Mash.Zafar

[marce1000]

 - Have a checkup of the 9800 controller configuration with the CLI command show tech wireless ; feed the output into 
                                                                                                                     Wireless Config Analyzer

 M.  

[Mash.zafar.1]

Hi marce,

What should i check in controller configuration it is new controller i am deploying it first time.

Regards,

Mash.Zafar

[JPavonM]

First of all do not use default configs, on this case for aaa methods.
Second, do not use 1.1.1. as virtual IP as this is assigned to cloudflare and use TEST subnets covered on RFC5735 (https://www.rfc-editor.org/rfc/rfc5735)

[Mash.zafar.1]

Hi Pavon,

I have also tried doing it by making new profiles but still it showing same behavior. I can't understand just enabling web auth feature from WLC to specfic SSID stops it broadcasting when i turned it off it again starts to broadcast.

Regards,

Mash.Zafar

[Giorgos_Mama]

Hi Pavon,

Please note that the clients to authenticate using the wlc guest portal need to authenticate centrally.
So go to policy and enable Central authentication. See the screenshot below

[MHM Cisco World]

you want WebAuth local or external ?

Thanks A Lot
MHM

[Mash.zafar.1]

Hi MHM,

Yes Web Auth local by making guest users on WLC.

Regards,

Mashaheer Zafar

[MHM Cisco World]

Which guide you follow  can ypu share link.

Thanks A Lot
MHM

[Mash.zafar.1]

Hi MHM,

I followed the instruction video. 

Regards,

Mash. Zafar

[MHM Cisco World]

I want to check video to see missing steps 

Thanks A Lot
MHM

[Mash.zafar.1]

Hi MHM,

Language in not in english but you can go through the steps he follows in the whole video.

https://www.youtube.com/watch?v=I5oVMC_3LUY

https://www.youtube.com/watch?v=Ipjbn3gPGWs

Regards,

Mash.Zafar

[Rich R]

Make sure your IOS is up to date as per TAC recommended below.  Currently that is 17.9.4 + SMUs + APSPs.

Make sure you have been through the documentation:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/web-authentication/b-configuring-web-based-authentication-on-cisco-catalyst-9800-series-controllers/m-what-is-web-based-authentication.html
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-9/config-guide/b_wl_17_9_cg/m_vewlc_sec_webauth_cg.html

And check the Best Practice guide - link below.

And use the Config Analyzer to check your config - link below.