So, the user logs in , we get the capitve portal, which is successful but its not assigning our test user 'guest2010' into the guest profile and using the guest-web policy that has our NAT rule
(P7FUJI01) #show user
Users
-----
IP MAC Name Role Age(d:h:m) Auth VPN link AP name Roaming Essid/Bssid/Phy Profile
---------- ------------ ------ ---- ---------- ---- -------- ------- ------- --------------- -------
10.36.2.246 00:24:2b:c1:47:43 guest-logon 00:00:38 00:24:6c:c3:1f:91 Wireless PincG/00:24:6c:b1:f9:11/g-HT guest-aaa-profile
10.36.3.253 00:1c:bf:23:51:aa guest-logon 00:00:54 00:24:6c:c3:1f:91 Wireless PincG/00:24:6c:b1:f9:11/g guest-aaa-profile
10.36.3.250 00:1e:c2:c3:8a:ce guest2010 guest 00:00:46 Web 00:24:6c:c3:1f:91 Wireless PincG/00:24:6c:b1:f9:19/a-HT guest-aaa-profile
User Entries: 3/3
(P7FUJI01) #show acl hits
User Role ACL Hits
------------------
Role Policy Src Dst Service Action Dest/Opcode New Hits Total Hits Index
---- ------ --- --- ------- ------ ----------- -------- ---------- -----
guest guest-blacklist any any any permit 28 28 15801
guest-logon guest-control user any svc-dhcp permit 0 1 15775
guest-logon guest-control user DNSServers svc-dns permit 0 17 15776
guest-logon captiveportal user mswitch svc-https dst-nat 8081 0 8 15778
guest-logon captiveportal user any svc-http dst-nat 8080 0 2 15779
guest-logon any any 0 deny 9 31 15781
Port Based Session ACL
----------------------
Policy Src Dst Service Action Dest/Opcode New Hits Total Hits Index
------ --- --- ------- ------ ----------- -------- ---------- -----
validuser any any any permit 0 86 7954
deny-corporate-to-mgmt any controller-vrrp svc-syslog permit 8 1157 8266
deny-corporate-to-mgmt inband-ip inband-ip any permit 1365 646665 8267
deny-corporate-to-mgmt inband-ip vrrp-mcast any permit 0 8881 8268
deny-corporate-to-mgmt airwave inband-ip any permit 20 11660 8270
deny-corporate-to-mgmt guest-users inband-ip svc-http permit 0 213 8271
deny-corporate-to-mgmt any inband-ip svc-papi permit 13 7427 8275
deny-corporate-to-mgmt any inband-ip svc-gre permit 0 4 8276
deny-corporate-to-mgmt any inband-ip svc-http permit 0 115 8280
deny-corporate-to-mgmt any inband-ip svc-syslog permit 0 11 8284
deny-corporate-to-mgmt any inband-ip svc-icmp permit 0 2 8285
deny-corporate-to-mgmt any any 0 deny 34 3353 8286
Port ACL Hits
-------------
ACL ACE New Hits Total Hits Index
--- --- -------- ---------- -----
(P7FUJI01) #