09-19-2012 11:34 AM - edited 07-03-2021 10:41 PM
I have a 4404 running 7.0 code. My client wants to be able to have a splash page pop up when a user joins a specific SSID. There should be no type of authentication that happens. This will be like web auth to an external server, the only difference is when the user joins the SSID and they open a web browser it redirects you to a web page on a server somewhere. No authentication or anything. After that the user should be able to go anywhere they want. Or we can make it so a web page on a server automatically pops up when they join the SSID. Is this possible?
The client also wants the ssid to be WPA-PSK encrypted. I have been messing around with Web Auth external pages and such but can seem to get it to work without authenticating some how.
Any input will be helpful thanks..
09-19-2012 11:45 AM
Did you put in a pre-auth ACL that allows the subnet to reach the external server?
HTH,
Steve
------------------------------------------------------------------------------------------------
Please remember to rate useful posts, and mark questions as answered
09-19-2012 12:18 PM
Thanks for the quick reply. I put a pre-auth ACL that only allowed DNS and the external server page. With this, I am still trapped in the external page. Any attempt to navigate away redirects me back to the same external server page. If I put an any/any rule at the end of the pre-auth ACL, I am no longer redirected at all even at the beginning to the external server and I can browse freely. I want to be redirected once to the external server then browse freely.
I am currently set for no layer 2 security and layer 3 security is web policy, passthrough, with the pre-auth acl, and the redirect at the bottom.
Any ideas
09-19-2012 12:18 PM
Well if your good with HTML, you can use a passthrough and hide the accept button and code the page to automatically hit accept. This way a user associated to an SSID and gets a splash page, but the splash page hits accept right away and then the redirection takes place. Now you can code the redirection also on the HTML page. Now depending on how many SSIDs and custom pages you need, the wlc limits you to 2mb of combined HTML and images.
Sent from Cisco Technical Support iPhone App
09-19-2012 12:19 PM
May I ask what special information is on this webpage - I just wonder why you are not able to use the default page or customize it with the informations that you require.
So it would not be an option for you to use passthrough with the Accept button and then get redirected to your special external webpage?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide