External Web Authentication

[Prasan Venky]

Hi everyone,

Does the client segment should have the reachability to the external web server (like ISE) or the anchor controller will get the web page and give it to the client..?

[Scott Fella · Accepted solution]

You need to allow access to the ISE. That is why you need to use pre auth ACL's.

Sent from Cisco Technical Support iPhone App

[Prasan Venky]

Many thanks for your quick response.

Is there any possibility to configure the WLC to get the redireted page from the ISE and send it to client when the client is not having reachability to ISE..?

[Scott Fella]

No

Sent from Cisco Technical Support iPhone App

[Prasan Venky]

Short and crisp answer...

Thanks a lot once again Scott

[Scott Fella]

Haha... It's how it's designed. The WLC isn't a relay for any type of external web redirect.

Sent from Cisco Technical Support iPhone App

[Prasan Venky]

Yep.. I got it now .. We face the same issue here.. unable to get webpage from ISE due to non-reachability from the client. We will have to route it and check then

[Scott Fella]

This might help explain it better:

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080bba10d.shtml#topic13

Thanks,

Scott

Help out other by using the rating system and marking answered questions as "Answered"