Case Study: Built-in Portal Authentication Fails

Symptom

After built-in Portal authentication is configured, the Portal authentication page can be displayed, but Portal authentication cannot be performed.

Relevant Alarms and Logs

None

Cause Analysis

The STA cannot communicate with the built-in Portal server.

Procedure

1. Collect networking information and configurations.

   The forwarding mode is direct forwarding, and the service VLAN is not allowed on the AC.

   Figure 9-9 shows the networking diagram and some configurations.

   Figure 9-9 Networking diagram
   

2. Check network connectivity between the STA and the built-in Portal server.

   Ping the IP address of the built-in Portal server from the STA.

   Ping the IP address of the STA from the Portal server built in the AC.

   The ping result shows that the network between the STA and the built-in Portal server is unreachable. After a route is added, the problem is solved.

3. Configure a route to ensure network connectivity between the STA and the built-in Portal server.

   The configuration on the switch is as follows:

   [switch] ip route-static 172.20.1.1 255.255.255.255 10.10.10.2 

   The configuration on the AC is as follows:

   [AC] ip route-static 192.168.3.0 255.255.255.0 10.10.10.1

Suggestion and Summary

When configuring built-in Portal authentication, ensure that the IP address of the STA is reachable to the IP address of the built-in Portal server.