Security

Reply
Contributor I
Posts: 25
Registered: ‎03-27-2015

Unable to update Endpoint attributes after Guest web login

[ Edited ]

Hello all,

 

I have a deployment currently running on 6.5.6 with Wireless Guest on a Cisco WLC 8000 series separated by L3.

 

Mac filter failure to the captive portal sign-in page is great. Users can sign in and browse, no problem. The issue I'm having is on post authentication when applying the Mac caching attributes to update the Mac-Auth Expiry attribute on the endpoint after they've logged in. Long story short, it doesn't update with any attributes, and so Mac caching is not functioning as intended.

 

Access Tracker entries show the end host identifier as an IP address, not a MAC address like I'm used to seeing. The input tab does not show any mac address details for the client endpoint.

 

I'm not sure how to go about updating these attributes. Can I update Mac-Auth Expiry through the post authentication/customize endpoint attributes on the web login page? I'd have to create a field for Mac-Auth Expiry at that point. If that's the way, how would I go about it?

 

Please see attached screenshots for more information. Happy to provide any more information if needed.

 

Thanks,

Tim

MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: Unable to update Endpoint attributes after Guest web login

[ Edited ]

Can you please share the output tab from Access Tracker as well?

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Contributor I
Posts: 25
Registered: ‎03-27-2015

Re: Unable to update Endpoint attributes after Guest web login

Hi Victor,

 

I've updated the original post with the screenshot requested.

 

Thank you,

 

Tim

MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: Unable to update Endpoint attributes after Guest web login

Can you please share how are you redirecting the user to the captive portal page ?

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: Unable to update Endpoint attributes after Guest web login

Can you please share how are you redirecting the user to the captive portal page ?

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Contributor I
Posts: 25
Registered: ‎03-27-2015

Re: Unable to update Endpoint attributes after Guest web login

Mac filtering enabled on the SSID, on MAC filter failure redirect to captive portal web page.

 

Also of note, I do not have administrative access to the WLC. It is owned by another party, and wireless services are provided through a contract setup.

MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: Unable to update Endpoint attributes after Guest web login

Do you see the client MAC address in the browser when redirected ?

Also take a look at the Input tab > Computed attributes and see if the MAC address shows up.

If not you want to use this :
https:///guest/guest_page.php?mac=%{Connection:Client-Mac-Address-Colon}

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: Unable to update Endpoint attributes after Guest web login

Do you see the client MAC address in the browser when redirected ?

Also take a look at the Input tab > Computed attributes and see if the MAC address shows up.

If not you want to use this :
https:///guest/guest_page.php?mac=%{Connection:Client-Mac-Address-Colon}

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Contributor I
Posts: 25
Registered: ‎03-27-2015

Re: Unable to update Endpoint attributes after Guest web login

Hi Victor,

 

Yes, I do see the mac address in the browser URL when redirected.

 

The client mac address is not present in the input -> computed attributes on the access tracker entry.

 

To clarify on the URL you provided, is that what I should be asking the WLC admin to update on the captive portal redirect URL?

 

Thanks!

 

Tim Friesen

ACCP/ACMP/CWNA/CWSP

MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: Unable to update Endpoint attributes after Guest web login

If the mac address is showing then no need to make changes on the WLC.

The config looks good.

What version are you running ?
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Search Airheads
Showing results for 
Search instead for 
Did you mean: