cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
777
Views
0
Helpful
7
Replies

WEB Authentication

sreejith_r
Level 1
Level 1

Anyone tried web authentication and proxy together. I am using ISA as a proxy. But if i am enabling the WEB authentication for that particular SSID Redirection is not happening. Expecting your valuable suggestions.

7 Replies 7

Scott Fella
Hall of Fame
Hall of Fame

The issues is that the wlc needs to resolve the users homepage when he or she opens a web browser. Since there is no configuration setting for a proxy on the wlc, the wlc can't resolve the homepage and the users will get... page connot be displayed.

-Scott
*** Please rate helpful posts ***

can we set something on the ISA server to redirect to 1.1.1.1/login.html.

It will still fail, since the WLC needs to resolve the users home page. You can redirect the url, but that will not help. For webauth to work. Here is from a doc:

In the WLC versions earlier than 3.2.150.10, users must manually type in https://1.1.1.1/login.html to navigate to the web authentication window. But if the same issue occurs with WLC versions later than 3.2.150.10, it is related to DNS lookup. When a user in that SSID tries to access the Internet, the management interface of the controller does a DNS query to see if the URL is valid. If it is, then it shows the authorization page, with the IP address of the virtual interface. After the user successfully logs in, the original request is allowed to pass back to the client. Therefore, ensure the DNS server is configured properly.

-Scott
*** Please rate helpful posts ***

Without proxy web authentication is working fine. if we are putting the proxy manually then redirection is not happeneing. i think its not the issue with the DNS.

That is how it will work.... You can disable the proxy on the client and when he or she opens a browser, they will get the login page. When they hit accept they will get page can not be displayed. They will have to turn proxy back on and then will they be able to access the web. Redirect will fail since after the login... is where the redirect happens, but as you know.... page cannot be found.

If you are trying to filter the guest traffic, look into ironport or websense.

-Scott
*** Please rate helpful posts ***

Hi,

In the proxy settings there is one tab called advanced. there we can specify the ip adresses for which we dont want to use the proxy. Once we are opening the internet explorercan you specify where the traffic is going. to the managemnt interface or the virtual interface . if we exclude the ip from the proxy list it may work. right???

You can give that a try... open the vip and the management interface ip address.

-Scott
*** Please rate helpful posts ***
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card