WLC5500 Guest Wifi Issue

[Nurul Islam]

Hi,

Recently we have renewed Guest-Wifi certificate.

After the renewal, Guest users are not able to access the internet, but they are able to ping any website on the internet. and it's showing No Internet on the taskbar

Example: google.com is pingable from command prompt but cannot browse... Tried on Chrome/Firefox/IE

Please help!

[balaji.bandi]

is that renewal with the same CA ? what is the error getting at the user end? what version of WLC code?

[Nurul Islam]

Code version 8.5

Certificate: Earlier it was Jacobs, now it's Worley

Please see attached screenshots

[Nurul Islam]

One more thing I just want to mention here, that virtual interface's DNS host name(guestwifi.xxx.com) is not resolving with nslookup... Means not getting any IP address when doing nslookup, looks like it's doesn't have DNS entry in our internal dns server...

Could it be an issue?

[balaji.bandi]

first check are you getting right DHCP pool IP address?

second - nslookup should resolve the DNS,if not it not able to get browsing.

try with IP address are you able to go to any websites?

[Nurul Islam]

> Users are getting proper IP address from DHCP.

> Browse using IP, not working

> Virtual interface's DNS Host(guestwifi.xxx.com) is not resolving, I checked with our team and found out there is not DNS record in DNS servers for this new DNS Host(Virtual Interface DNS Host)...

[balaji.bandi]

I checked with our team and found out there is not DNS record in DNS servers for this new DNS Host(Virtual Interface DNS Host)...

by changing this it was resolved?

[Nurul Islam]

No, it's not resolved.

Now looks like issue is somewhere else...

On the same controller few sites are working fine with guest wireless, but one particular site is not...

that particular site is having this issue(not able to browse but able to ping everything)

[balaji.bandi]

that particular site is having this issue(not able to browse but able to ping everything)

internal or external?

[Nurul Islam]

Thanks for your responses Balaji.

Actually the issue was somewhere else.

Site has a local firewall, and the tunnel between Local firewall and Zscaler was down..

[balaji.bandi]

Zscaler was down

you should have got alerts system if the system setup correctly when the things go down,

Any way glad all good and working as expected I guess as per the message.