Hi, does anyone did the dot1x fallback? please help how to do it.
thanks

Hi, thanks for the reply.. it is for the wired network. This is due to some of the users with limited technical knowledge and may not configure their device for dot1x properly especially those VIPs. Customer wants the web authentication as interim solution. This is to avoid complains from users at one shots and due to limited resource to fix the dot1x issue of each of the individual. The users will be relocating soon to the new building.

Hi MC,

I tried what you've suggested but it is partially working.. I can't figure out what is the issue now as the users not prompting the redirect page. from switch i can see, it shows the redirect page to the switchport by issuing command, show authen session interface. I believe the wired setup are the same with the wireless guest? for wireless no problem, the users redirecting to the guest portal page. only for the wired network, i'm not able to see the redirect page from users PC. I can see the athentication logs that it hits the redirect policy. please advice what could be the problem.
Thanks

Hi, the issue resolved. It happens that in our network the client is connected to the Layer 2 switch and the SVI is in the Distribution switch. We leaked the routing from management and user vlan. It's either create the svi on the access switch or leaking the routing between the 2 vlans. Cisco TAC says this is only the solution in order the cwa works in our setup.