Hello All,
I am working on integrating Cisco ISE 3.4 Patch 5 Guest Portal with Ruckus One (Cloud-managed WLAN), and I am facing an issue where the client stays stuck in Portal Redirection state even after successful authentication with Captive Portal WiSPr Option or URL Redirection is not working with like Cisco Central Webauth Setup .
I want to implement the following guest access workflow:
Guest connects to SSID (Ruckus One)
Redirect to Cisco ISE Guest Portal
Guest self-registers
Sponsor approves request
Guest logs in
Guest should get Internet access
Environment
Cisco ISE: 3.4 Patch 5 (on-prem)
WLAN Controller: Ruckus One (Cloud)
SSID Type: Captive Portal (3rd Party/WISPr) or MAC authentication with External Radius
Guest Portal: Cisco ISE Self-Registered Guest Portal
Authentication: RADIUS (ISE)
Sponsor Portal: Working
Issue with WISPr Option:
Client remains in “Portal Redirection” state on Ruckus
No transition to “Authorized”
Internet access is not granted
Even after: Disconnect / reconnect WiFi, Client is redirected again to portal
Checking ISE Live Logs: NO new RADIUS request after reconnect, Only Portal logs are available.
Issue with MAC Authentication (CWA) SSID Option:
In the Result Option of authorization profile: If I select CiscoWebAuth (Pre defined) policy then Access Rejected, Seems Vender is not able to understand the radius attributes or option.
In the Result Option of authorization profile: If I select Ruckus Wireless (Pre-defined) policy with enabling CWA then Access Accepted, and no Guest Portal Redirection.
There are attached screenshot of ISE configuration and Ruckus Wireless controller Logs.Guide me how to resolve this issue, what is your best advise here? Do I need to change my strategy for this implementation?
