Using SSID W/webauth and getting connected intermittent website access

[rbowers]

We use a SSID and use webauth to authenticate on the WLC. The users are getting the correct DHCP IP Address allocation and set up on their personal phone and pads.  Both android and iphone are having this issue.

They are on the internet and are accessing websites.  Sometimes they work ok.  Other times they connect but are slow and sometimes they do not connect. Very intermittent.

Any ideas on why they are having this issue?

[Flavio Miranda]

Hi

 I´d add a notebook on this SSIDs to run some ping tests and nslookup.  I am saying notebook cause it has more tools in order to troubleshooting. 

  There are many reason this problem can happen. Starting with wifi signal problem, DNS problem, ISP problem, etc.

[rbowers]

I had some incorrect information in the initial post.

The wireless users are on a foreign controller. They get an IP address and associated with the WLC ok.  They are in site B and the anchor is in site A. They get their Dynamic IP address form DNS at site A. Then the traffic has to back haul to site A to the internet. No local internet access.

When they try and go out the internet they do not connect. The certificate on www.yahoo.com looks good for the users non-corporate laptop. But it will not bring up the website page. The user gets yahoo.com - Your connection to this site is not secure.

I have gone over this configuration with Cisco TAC and they have not yet identified any issues with the WLC configuration.

There is a proxy but the proxy team has verified the traffic ok.  There is a firewall on the internet edge but it points them directly to the internat access.

Any ideas why this may not be working for the BYOD device?

[Scott Fella]

I would also create a test ssid that is open and anchor that back to site A.  See if you get the same issue or not.  At least this eliminates any webauth issue and points to the proxy/dns.  If you connect a laptop to that same vlan in site A, does that work?  You just need to start eliminating things to see what is working and what is not.