Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

NAS redirect page

Hi All,

there is NAS, OOB, L3, RGW implementation. I've remove NAS from NAM, then readded it. after that, when I type NAS untruted interface in broswer, it prompts to redirect and after a while it shows "web page can't be displated". In address bar in IE, it only shows domain name without the NAS host name. like: https://companyabc.com/......

I've checked DNS and it looks ok.

any suggestion would be very appreciated.

thanks

Alex

7 REPLIES

Re: NAS redirect page

Alex,

So your client can resolve the redirect URL that the NAS tries to send it to? In your example companyabc.com ?

If so, how are you forcing the traffic to hit the untrusted interface of the NAS? Using PBRs? ACLs? or VRFs?

Faisal

New Member

Re: NAS redirect page

Hi Faisal,

redirect URL is not resolvable by client that's why it shows "web page can't be display". the actual URL is:

https://contractorswardrobe.net/auth/perfigo_weblogin.jsp?cm=ws32vklm&uri=http%3A%2F%2F192.168.12.252%2F

I am using ACL.

Thanks again

Alex

Re: NAS redirect page

Alex,

Contractorswardrobe.net has to be resolvable, otherwise how would the browser direct the traffic to that site?

Ensure your DNS traffic is also allowed through the ACLs, and for testing you can put that dns name in your hosts file and see if the redirection and authentication attempt thereafter happens or not.

HTH,

Faisal

New Member

Re: NAS redirect page

Faisal,

first users type cw-nas-oob on the url. this name in DNS resolved to untrusted interface in nas. then it redirect to contractorswardrobe.net/.... url which is not resolvable.

thanks

Alex

Re: NAS redirect page

Alex,

That is my point. It has to be for your client to get to that site. Why is it not resolving? Focus on that portion and troubleshoot that first.

HTH,

Faisal

New Member

Re: NAS redirect page

Faisal,

my question is: when I type cw-nas-oob as URL in address bar, why does it redirect to the domain name without host name, like: https://contractorswardrobe.net.....

I think it's supposed to redirect to:

https://cw-nas-oob.contractorswardrobe.net.....

but it doesn't.

any idea would be very appreciated.

thanks

Alex

Re: NAS redirect page

Alex,

The CAS pulls that URL for the redirect from its certificate subject. What do you have the CAS certificate issued to? If it's contractorswardrobe.net, change it to cw-nas-oob.contractorswardrobe.net, reboot and try again

HTH,

Faisal

180
Views
0
Helpful
7
Replies
CreatePlease to create content