collapse

Search


User Info

 
 
Welcome, Guest. Please login or register.
Did you miss your activation email?

Author Topic: changing cwa redirection url for guest portal  (Read 41743 times)

Offline spark_rod

  • Cisco Newbie
  • *
  • Posts: 9
  • Reputation: 1
  • Certification: CCNP
changing cwa redirection url for guest portal
« on: June 12, 2014, 06:14:09 PM »
Hi, is it possible to change the guest portal url for cwa? The customer requirement is not to allow guest users to acccess the internal dns for which the ise nodes dns is in. They give the public dns and create another dns entry for ise nodes so when guest coonected to guest ssid they can resolve the fqdn using the public dns. Internal dns and public dns are different. Please advice if possible how to do it. Thanks

Offline MC

  • Global Moderator
  • Cisco Guru
  • *****
  • Posts: 399
  • Reputation: 606
  • CCIE x3 (RS,Sec,SP)
  • Certification: CCIE
Re: changing cwa redirection url for guest portal
« Reply #1 on: June 15, 2014, 01:01:12 AM »
I don't think you can change the guest URL. If guest user will have access directly to ISE internal IP then you can just create duplicate DNS entry on the public DNS server (use public NAT IP as appropriate). Otherwise, you can try to use a second NIC on ISE PSN, put it on the network that guest can access like DMZ, give it a new IP, and create a corresponding DNS entries on public DNS server.

Offline spark_rod

  • Cisco Newbie
  • *
  • Posts: 9
  • Reputation: 1
  • Certification: CCNP
Re: changing cwa redirection url for guest portal
« Reply #2 on: June 30, 2014, 08:01:06 AM »
Hi MC,

Thanks for the reply.
The actual scenario is, the users will be given the 8.8.8.8 DNS once connected to Guest SSID. They have a public DNS which is hosted by the ISP and Internal DNS which is hosted internally. We have entry from internal dns for the ISE's. Are you suggesting to create same entry as the internal dns for ISE to the public DNS which is hosted by the ISP? Will the users with dns 8.8.8.8 can still access the guest portal? Please confirm.
Thanks

Offline MC

  • Global Moderator
  • Cisco Guru
  • *****
  • Posts: 399
  • Reputation: 606
  • CCIE x3 (RS,Sec,SP)
  • Certification: CCIE
Re: changing cwa redirection url for guest portal
« Reply #3 on: June 30, 2014, 11:06:30 PM »
You can certainly do that as long as you use the same domain for both internal and external. The next question would be, how will you allow guest user to hit the ISE PSN node as part of the URL redirect (TCP/8443) assuming your PSN resides only in the internal network.

 

Related Topics

  Subject / Started by Replies Last post
2 Replies
11368 Views
Last post January 04, 2015, 11:27:06 AM
by maiquel
13 Replies
24767 Views
Last post July 06, 2015, 12:51:41 PM
by MC
3 Replies
10574 Views
Last post December 23, 2015, 02:10:04 AM
by davidferns7
1 Replies
6415 Views
Last post March 20, 2016, 09:20:58 PM
by MC
1 Replies
8733 Views
Last post December 19, 2016, 09:32:23 PM
by MC

SimplePortal 2.3.7 © 2008-2024, SimplePortal