cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5108
Views
5
Helpful
15
Replies

Web-auth not automatically redirecting

vikas01234das
Level 2
Level 2

1) ipconfig - correct

2) DNS resolving - correct

3) WLC-> controller -> interface -> Virtual -> ip address - 1.1.1.1 and DNS Host Name -> Empty 

  • 4) When i reboot WLC - web-auth redirect not working.
15 Replies 15

Rich R
VIP
VIP

Warning: do not use https redirection on a busy 9800 WLC.  We had it enabled and numerous clients were not getting splash/landing page at all.  TAC eventually told us to turn it off "NOT RECOMMENDED" and that solved all the problems.  No option to tune or optimise it and it turns out 9800 capacity for https redirection is less than 8540 and the WLC will just stop redirecting clients - even on http - causing severe degradation of service.
Do not use it on older AireOS WLCs and it is only scalable on 8540 or 5520 running 8.10 software.

Regarding @vikas01234das original problem - as I've explained many times before on this community:
Redirects to https pages will only work reliably on modern devices and browsers using a registered DNS resolvable fully qualified domain name (FQDN) with a matching certificate issued by a public CA which the devices trust.  Trying to use IP addresses (whether 1.1.1.1 - which you should not use - or anything else) WILL cause problems on the majority of modern devices and browsers.

------------------------------
Please click Helpful if this post helped you and Accept as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's   and   TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's,   Best Practices for 9800 WLC's   and   Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
Field Notice: FN74383 APs Running 17.12.4/5/6/6a May Run Out of Flash Space Preventing Upgrades
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390
Review Cisco Networking for a $25 gift card