Security

I have a capive portal that has been setup. The guest is given a web page to fill out and then they submit for approval.

I get the email and approve the request.

The user page is refreshed and they get the login button to log on.

When they hit the log on button it brings them back to the sponsor page to fill in their information agan. I never see this request in Access tracker.

But if the user says they already have a password and manually enters their login information they can get access to the Internet. When the users manually enters their information I can now see the request come through the access tracker.

Any Ideas what to look for?

When it fails I get the follwing URL

https://192.168.100.235/guest/guest_user.php?errmsg=Access%20denied&_browser=1

No there isn't any error messages

yes it is

Do you have it to use the "The controller will send the IP to submit credentials" in the form ?

Is that IP address added to the Configuration > Network > Devices >

Yes there is an ACL permitting users to the controller

Do you have it to use the "The controller will send the IP to submit credentials" in the form ?

It wasn't there, tried adding it, it didn't work

Is that IP address added to the Configuration > Network > Devices >

One of your posts has .235 and one of your posts have .236.  Which one is the controller?

235 is the IP of ClearPass, 236 is the controller

Got it.  Please let us know how the TAC case is resolved.

I opened up a TAC case and the problem seemed to be the guest sponsor page seemed to be corrupt. We created a new page and everything worked as expected, put the old page and it started to loop again.

When I get the redirect page after I manually put in my username/password to login it is going to my controller. 

Is this correct?

https://192.168.100.236/cgi-bin/login

This times out

Then I can get to the Internet

Is that the ip address of the controller?