Unsecure warning for virtual ip 192.0.2.1 when using external webauth

[Nilesh108]

Hi All,

We are configuring ClearPass Guest page with Cisco controller.

When user is trying to connect to SSID , its redirects to ClearPass self-registration page and its not giving any Cert warning because ClearPass have public CA.

After user registrations on ClearPass, when user tries to login with username and password, request comes to Cisco WLC and its giving unsecure warning because cisco WLC don't have public CA.

we are planning to generate CSR with domain name and that domain name will be mapped under virtual Ip 192.0.2.1 is this the correct way to do?

[Scott Fella]

That is the way to do it, but there are guide that show you what you need to do depending if your controller is AireOS or IOS-XE.  Also, is it by design that you want the controller to present a web auth page because typically you don’t want to have CP and the controller. 

[Scott Fella]

Some links:

https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213917-generate-csr-for-third-party-certificate.html