vWLC-virtual interface

[Anukalp S]

Hi.. I have been running virtual wireless controller ver. 8.0.110.0, I have setup a wlan for guest and configured web authentication on it.

Web authentication is working but when auth page open it open with https. I cannot use any third party certificate hence want to disable https for web auth page and want page to redirect on HTTP instead of HTTPS.

Secondly page open https://1.1.1.1/login.html, I want to replace 1.1.1.1 ip address with host name(guest.xyz.com).

Please suggest how could I setup both.

Thanks.

[Scott Fella]

For the https redirect take a look at this link. 

https://supportforums.cisco.com/document/12398536/understanding-https-redirect-over-web-auth

As far as the VIP showing up as the redirect URL, you need to install a 3rd party certificate to change that and to get rid of the certificate error. Or you can just create a DNS A-record that resolves your VIP to a fqdn and the fqdn would show up in the URL. 

-Scott

*** Please rate helpful posts ***

[Anukalp S]

Thanks Scott, as I said I cant use 3rd party certificate because of some constraints. But I have made A record in our local enterprise DNS server( VIP to FQDN and FQDN to VIP) but still web auth page is getting open with VIP instead of FQDN. Though I have checked ip to fqdn and fqdn to ip is getting resolved properly in windows command prompt.

Is any thing else need to do, pls suggest.

[Scott Fella]

I still the DNS being resolved by the DNS servers that the clients are getting via dhcp?

-Scott 

*** Please rate helpful post ***

[Anukalp S]

No, when I connect to web auth wlan and check before putting web auth credential then don't see VIP to fqdn and fqdn to VIP resolution, but after putting credential it resolves with same DNS server.

C:\>nslookup 1.1.1.1
Server:  UnKnown
Address:  2001:4860:4860::8888

*** UnKnown can't find 1.1.1.1: No response from server

[Scott Fella]

Come to think about it... under the VIP interface, you need to add the fqdn and then reboot the controller. I forgot about that piece:)

-Scott

*** Please rate helpful posts ***

[Anukalp S]

Ok..Thanks, will check this in downtime window and update.