Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
402
Views
0
Helpful
7
Replies

NAS redirect page

alex goshtaei
Level 1
Level 1

‎11-03-2009 02:55 PM - edited ‎03-09-2019 10:41 PM

Hi All,

there is NAS, OOB, L3, RGW implementation. I've remove NAS from NAM, then readded it. after that, when I type NAS untruted interface in broswer, it prompts to redirect and after a while it shows "web page can't be displated". In address bar in IE, it only shows domain name without the NAS host name. like: https://companyabc.com/......

I've checked DNS and it looks ok.

any suggestion would be very appreciated.

thanks

Alex

Labels:
0 Helpful
7 Replies 7

Faisal Sehbai
Level 7
Level 7

‎11-03-2009 05:49 PM

Alex,

So your client can resolve the redirect URL that the NAS tries to send it to? In your example companyabc.com ?

If so, how are you forcing the traffic to hit the untrusted interface of the NAS? Using PBRs? ACLs? or VRFs?

Faisal

0 Helpful

alex goshtaei
Level 1
Level 1
In response to Faisal Sehbai

‎11-03-2009 08:37 PM

Hi Faisal,

redirect URL is not resolvable by client that's why it shows "web page can't be display". the actual URL is:

https://contractorswardrobe.net/auth/perfigo_weblogin.jsp?cm=ws32vklm&uri=http%3A%2F%2F192.168.12.252%2F

I am using ACL.

Thanks again

Alex

0 Helpful

Faisal Sehbai
Level 7
Level 7
In response to alex goshtaei

‎11-03-2009 08:39 PM

Alex,

Contractorswardrobe.net has to be resolvable, otherwise how would the browser direct the traffic to that site?

Ensure your DNS traffic is also allowed through the ACLs, and for testing you can put that dns name in your hosts file and see if the redirection and authentication attempt thereafter happens or not.

HTH,

Faisal

0 Helpful

alex goshtaei
Level 1
Level 1
In response to Faisal Sehbai

‎11-04-2009 07:47 AM

Faisal,

first users type cw-nas-oob on the url. this name in DNS resolved to untrusted interface in nas. then it redirect to contractorswardrobe.net/.... url which is not resolvable.

thanks

Alex

0 Helpful

Faisal Sehbai
Level 7
Level 7
In response to alex goshtaei

‎11-04-2009 07:56 AM

Alex,

That is my point. It has to be for your client to get to that site. Why is it not resolving? Focus on that portion and troubleshoot that first.

HTH,

Faisal

0 Helpful

alex goshtaei
Level 1
Level 1
In response to Faisal Sehbai

‎11-04-2009 10:37 AM

Faisal,

my question is: when I type cw-nas-oob as URL in address bar, why does it redirect to the domain name without host name, like: https://contractorswardrobe.net.....

I think it's supposed to redirect to:

https://cw-nas-oob.contractorswardrobe.net.....

but it doesn't.

any idea would be very appreciated.

thanks

Alex

0 Helpful

Faisal Sehbai
Level 7
Level 7
In response to alex goshtaei

‎11-04-2009 10:44 AM

Alex,

The CAS pulls that URL for the redirect from its certificate subject. What do you have the CAS certificate issued to? If it's contractorswardrobe.net, change it to cw-nas-oob.contractorswardrobe.net, reboot and try again

HTH,

Faisal

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents