Cisco 5508 HA - Webauth Bundle for multiple SSID/multiple web pages

[CiscoWiFiGuy]

Hi Guys,

I have 2* cisco 5508 WLC in HA mode . Both are running IOS 7.5.102.0 . Everything is working perfectly fine.

I need to Creat 3 differnet SSID and Creat 3 different login Pages for them . Each user from respective SSID will get specified login Page. like

I have few questions :

1) I have downloaded webauth bundle from cisco Support Site and in that itself so many files are there. So based on my scenario , in which folder do i need to copy my login and logo file.

2) i have used Picozip to convert the file in .tar format but its giving me following error "

% Error: Webauth Bundle file transfer failed - No reply from the TFTP serve" but i can ping my tftp server easliy.

3) As Controllers are in HA mode , so once i am successful in uploading webauth bundle then it will be replicated on secondary controller or do i have to turn off SSO and upload in both one by one.

Please help me out in this.

Cheers

[Sandeep Choudhary]

This was a bugf in earlier version but not with 7.5:

https://tools.cisco.com/bugsearch/bug/CSCtd66990

Try to chnage this in ur tar file:

When it actually needs to be

http://www.addedbytes.com/articles/for-beginners/http-status-codes/

Reagrds

[CiscoWiFiGuy]

hi sandeep ,

i tried this but its again n again taking me to same web authentication page.

[Sandeep Choudhary]

Hi waqas,

Can you try with default custom page from cisco(I am also attaching a sample WAA). try to upload this tar file and let me know if it works.

If this works then this is 100% sure that ur tar file have problem.

Regards

[CiscoWiFiGuy]

Hello Sandeep,

i have uploaded the tar which you have sent to me. When i supply my username and pwd, after that it keeps on going and not showing any end result. so it stays on same page and nothing happening after that.

Are there any more radius ACL's to be defined ? 10.10.13.x is wireless client network , 192.168.10.21 is Radius Server , 192.168.10.215 is proxy server. Is there any other ACL need to be defined ??

-------------------------------------------------------------------------------

                       Source                         Destination                 Source Port  Dest Port

Index  Dir       IP Address/Netmask               IP Address/Netmask       Prot    Range       Range    DSCP  Action      Counter

------ --- ------------------------------- ------------------------------- ---- ----------- ----------- ----- ------- -----------

     1 Any      10.10.13.0/255.255.255.0     192.168.10.21/255.255.255.255  Any     0-65535     0-65535  Any Permit           0

     2 Any   192.168.10.21/255.255.255.255      10.10.13.0/255.255.255.0    Any     0-65535     0-65535  Any Permit           0

     3 Out      10.10.13.0/255.255.255.0           1.1.1.1/255.255.255.255  Any     0-65535     0-65535  Any Permit           0

     4  In         1.1.1.1/255.255.255.255      10.10.13.0/255.255.255.0    Any     0-65535     0-65535  Any Permit           0

     5 Any      10.10.13.0/255.255.255.0    192.168.10.215/255.255.255.255  Any     0-65535     0-65535  Any Permit          98

     6 Any  192.168.10.215/255.255.255.255      10.10.13.0/255.255.255.0    Any     0-65535     0-65535  Any Permit          98

DenyCounter : 12

[Sandeep Choudhary · Accepted solution]

Are you using External webauth then only u need ACL???

If not then remove ACL and try again.

Authentication priority order for web-auth user should be RADIUS.

WLAN>edit then click on Security >AAA server  here Order Used For Authentication only Radius(remove other LADP ..or move to left side)

[habibalby]

Hello Sandeep,

The order is Radius Server only.

Thanks,

Hussain

[Sandeep Choudhary]

Can u try with internal Web page from WLC . This is just for Test ....

Don't use custmized webpage for Test and Let me know the results.

Regards

Sent from Cisco Technical Support iPhone App

[habibalby]

Hi Sandeep,

Its working now.. I just clear the Radius Server Overwrite interface.. and it started working.

Thanks for your great helpl.

[habibalby · Accepted solution]

Hi Sandeep,

I can confirm, both Internal and Customizable web page working fine by having Radius Server Overwrite interface UnChecked

Thanks,

Hussain

[Sandeep Choudhary]

Glad that finally u resolved ur problem.

Great..post---Waqas,

Reagrds

Dont forget to rate helpful posts and mark this question as aanswered.

[CiscoWiFiGuy]

Dear Sandeep and scott,

Thanks for your help in solving this issue.

Really appreciated...

Thanks