Auto login with web auth?

I have a guest WLAN on a mobility anchor that uses web auth for access. There is a small set of local users, but the majority of the auth comes from a Radius server. Question is, can I setup some type of policy that will auto login users based on MAC address so they don't have to web authenticate?
Thanks!
Edit: I have seen where you can enable mac filtering on the WLAN and specify individual mac addresses to permit. This would work, but I still want web auth for the majority of users. Only a few users should be automatically connected. The rest should still authenticate via web auth.

Well I have some fantastic news.... and then some horrible news at the same time...
In 7.0.116.0 a new feature was introduced called web auth on mac-filter failure. Basically it does exactly what I think you are asking. Right? You mac filter your wlan, and then if anyone fails the mac filter, they can web authenticate.
Unfortunately, it doesn't work in an Anchored scenario as the Mac filter is L2 performed on the Foreign WLC, and the Anchor does L3 with no knowledge the Foreign was good to bypass webauth.... CSCts54424 is tracking this behavior for Anchor scenario, but I don't think it is planned to go into 7.0......

Similar Messages

WLC 4402 - only present guest with web auth page once every (x) days

Hi all,
I am looking to migrate our guest wireless from a third-party system to the WLC. Currently, we change our guest password (WPA2 PSK) every (x) days. Each time the guest password is changed and connections are made with the new PSK, guests are redirected to a terms and conditions page which they must accept. The MAC address is then cached and the page is not displayed again until we clear the MAC cache and change the PSK.
I can almost replicate this with web auth in passthrough mode on the WLC, but it presents the guest with the terms and conditions page each time they reconnect to the WLAN, whether it be from roaming offsite or turning the wireless radio off then on.
Is there any way to have the WLC replicate our current system, where a MAC is cached and the page is not displayed until some other event takes place (changing the PSK or clearing the cache?)
Thanks!
-P

Wait ... Shaoqin, will the 7.5 code be released for the 4400 series controllers? The current release is 7.0.240.0 - I see releases up to 7.4 on the 5500 series controllers
Thanks
-P

Auto Login With Request Parameters

Hello
I am working on a test JSF application in NetBeans 5.5 using the visual web pack. Currently there are only two pages in the app, a login page and a main page.
I am trying to figure out how I could set up an auto login to a JSF based web app. I would like the app to be able to take username and password parameters on the URL and automatically attempt to log into the app with those values. When the URL contains these parameters and they're valid, instead of displaying the login page, it would start up with the main page displayed. If the paramters were not present or invalid, the login page would be displayed.
I've read about how to pull request parameter values into from a JSP page, but I don't think that would helpful for this case. I have instances of ApplicationBean, SessionBean and RequestBean in the project. I'm wondering if any of these would be the appropriate place to add some code to check for the parameters, attempt to login and display the correct page based on the login result.
And advice greatly appreciated.
Shelli

I'll be so kind to share a basic example I've been playing with a while ago :)
public class UserFilter implements javax.servlet.Filter {
    @SuppressWarnings("unused")
    private FilterConfig filterConfig;
    public void init(FilterConfig filterConfig) {
        this.filterConfig = filterConfig;
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
        throws IOException, ServletException
        // Check PathInfo.
        HttpServletRequest httpRequest = (HttpServletRequest) request;
        String pathInfo = StringX.trim(httpRequest.getRequestURI(), httpRequest.getContextPath());
        if (pathInfo.indexOf(PATH_INC + "/") == 0 || pathInfo.indexOf(MAIN_JSF) == 0) {
            // If include files are loaded (subviews, images, css, js) or if unfriendly URL is
            // requested somehow, then continue the chain and abort this filter. In case of
            // unfriendly URL's, the next filter in the chain is the FriendlyUrlFilter which
            // translates the URL and will redirect back to this filter.
            chain.doFilter(request, response);
            return;
        // Get UserSession from HttpSession.
        HttpSession session = httpRequest.getSession();
        UserSession userSession = (UserSession) session.getAttribute(SESSION_ID);
        if (userSession == null) {
            // No UserSession found in HttpSession; lookup SessionId in cookie.
            String sessionId = Context.getCookieValue(httpRequest, COOKIE_ID);
            if (sessionId != null) {
                // SessionId found in cookie; lookup UserSession by SessionId in database.
                userSession = new UserSession();
                userSession.setSessionId(sessionId);
                LoadQuery<UserSession> loadQuery = new LoadQuery<UserSession>(userSession);
                try {
                    Dao.execute(loadQuery);
                    userSession = loadQuery.getOne(); // This can be null.
                    // If this is null, then session is just deleted from DB or the cookie is fake.
                    Logger.info("Loading usersession succeed: " + userSession);
                } catch (DaoException e) {
                    Logger.error("Loading usersession failed.", e);
            if (userSession == null) { // loadQuery.getOne() can return null.
                // No SessionId found in cookie, or no UserSession found in DB; create new UserSession.
                sessionId = StringX.getUniqueID();
                userSession = new UserSession(sessionId);
                try {
                    Dao.execute(new SaveQuery<UserSession>(userSession));
                    Logger.info("Creating usersession succeed:" + userSession);
                } catch (DaoException e) {
                    Logger.error("Creating usersession failed.", e);
                // Put SessionId in cookie.
                HttpServletResponse httpResponse = (HttpServletResponse) response;
                Context.setCookieValue(httpResponse, COOKIE_ID, sessionId);
            // Set UserSession in current HttpSession.
            session.setAttribute(SESSION_ID, userSession);
        // Add hit and update UserSession.
        userSession.addHit();
        try {
            Dao.execute(new SaveQuery<UserSession>(userSession));
            Logger.info("Updating usersession succeed:" + userSession);
        } catch (DaoException e) {
            Logger.error("Updating usersession failed.", e);
        // Continue filtering.
        chain.doFilter(request, response);
    public void destroy() {
        this.filterConfig = null;
}By the way, the 'User' DTO is wrapped in the UserSession which can be retrieved in the backing bean by:
public User getUser() {
    return ((UserSession) Context.getSessionAttribute(SESSION_ID)).getUser();
}If the User is not logged in, then this is null. If the user is logged in, then put the User in the UserSession object.

Windows 7 Clients Not Working With Web-Auth

I am using 5508 controllers, configured for WEB-AUTH passthrough, Windows XP clients work fine but Windows 7 clients are hit and miss getting redirected to the splash screen.
The login page is customised showing T's & C's with two buttons Except or Reject.
Do I need to Pre-Auth with ACL's? Has anyone had similar issues, or any good doc's etc.
Thanks in advance for any replies.
Jay

Nicolas,
Many thanks for your relpy, the problem is that this is a guest network that's also avalable to the public and I dont have any control over the end clients.
After doing a quick search on the net I found this.
NCSI : Uses a combination of DNS and/or HTTP look ups to tell if you are connected to the Internet. The way NCSI does this is either via a HTTP request for http://www.msftncsi.com/ncsi.txt or a DNS look up for dns.msftncsi.com that resovles to 131.107.255.255.
NCSI does this whether you are logged on or not.
Do I need to Create a Preauthentication ACL on the Guest WLAN interface:-
Configure a preauthentication ACL on the WLAN to allow wireless clients to allow:-
1. Permit DNS resolution (UDP/53) to 213.199.181.90
2. Permit TCP port 80 to 131.107.255.255
Jay

Guest Anchor with web auth using ISE guest portal

Hello All,
Before launching into my exact issues, could anyone confirm if they have completed a wireless Guest anchor setup using 2504 controllers on 7.4 as the anchor (5508 is the foreign) with webauth external redirection at ISE 1.1.3 using ISE Guest Services?
I am attempting this for an internal POC and have hit a couple of issues. Firstly I am looking for correct configuration confirmation prior to going in depth with a couple of the issues. I've been using the TrustSec 2.1 how to guides to build the parts I am not strong on so if anyone has actual completed this setup, I'd love to go through it with you.
massive thanks to anyone that can assist.
JS.

Thanks for the reply RikJonAtk.
so to start with, based on the trust sec documents, of the guest WLAN on the anchor I need to configure mac filtering at the layer 2 security menu as well as enable RADIUS NAC under the Advanced tab. But when I do this, I get an error message that states that mac filitering and RADIUS NAC cannot be enable at the same time.
Additionally, if I just enable the RADIUS NAC setting under the Advanced tab in the WLAN, I get another error message that states that the priority order for Web-Auth can only be set for radius, so I go to the AAA server tab and send local and LDAP to the not use column and hit apply. If I move to another menu then check the priority order again under the AAA servers tab, the local and LDAP have been moved back to the menu field to be used again. So I initially though it might be a bug, but I was hoping to find someone here that has done this already and can look at my issues and maybe walk me through their configs, which I'll mirror and see how it goes.
Thanks in Advanced,
JS

Can I login with http auth

I want to login with my mail id by using http auth
for check my inbox, contacts, calendar or more folders which is available on my mail ID
my mail id on exchange server.
any one have any idea about this.

http auth is used with the http protocol. email doesn't use the http protocol.
If you can use POP or IMAP to connect to your Exchange server and login,
you can probably use JavaMail to do that.

Problem with Web Auth

hi
i have two wireless networks,one for the guests and the other one extends the corporate network.i created two vlan on my 6509 swicth and mapped the vlns to to the wlans.All is working fine but when i enable web auth for guest i can no longer ping my gateway or browse and even web auth is not authenticating against the internal users configured on the WLC...web auth just wont work.
what could be wrong..i really need to authenticate using web auth.

ok, SO this is what i need
send me show custom-web details
S if you open the page do you get the default cisco webauth redirected page ; are you able to put the user name and password ?
can you send me the screen shot of events
Regards
Seema

HREAP with web-auth (internal)

I have a lwap at a remote site that is configured as HREAP so that it can continuously provide connectivity when the WLC is un-reachable. I have two vlans on the lwap. One is locally authenticated and locally switched for intranet connectivity. The other is for internet connectivity and I wanted that one to be locally switched, but authenticate at the WLC. When I configure the WLAN as HREAP - locally switched, it doesn't work. If I configure the WLAN as non-HREAP it works. Anyone know what the trick is to get this thing to work? I want my internet wlan at that site to be locally switched but centraly authenticated. My WLC only seems to have a selection for HREAP - Local switching, it doesn't have anything you would check to specify central authentication.
My WLC (2106) is version 6.0.182.0 and my lwap is an 1142n.
Thanks!

In the first document:
Q. Can I do web authentication with Local switching?
Yes, you can have an SSID with web−authentication enabled and drop the traffic locally after
web−authentication. Web−authentication with Local switching works fine.
1. WLAN, (wlan you want to local switch), Advanced tab, click the "H-REAP Local Switching" checkbox.
2. Wireless, (click the h-reap modify), H-REAP tab, click "Vlan Support", Vlan Mappings button, then map the wlan to vlan you want to drop traffic onto.
Also, for wan up/local switched wlans authentication still happens on the controller until the h-reap goes into wan down. WLANs default to central switching, you have to define the ones which need to be locally switched as described above.

Parameters and database login with Web Services SDK

I need to know how to do the two most common report tasks through the Web Services interface to Crystal Reports Server 2008:
How do I get a list of a report's parameters and set the parameter's values?
How do I set the database login information?
I have considerable experience with writing custom web interfaces for Business Objects Enterprise with .NET, but now we're supposed to use web services instead of Enterprise services, especially when writing Windows forms apps. The official line is that writing thick client apps using Enterprise services is "possible but not supported." I can't seem to find the equivalent to the .Parameters property in Web Services.
The tutorials for Web Services aren't much help. The BIPlatform examples show how to schedule a report without parameters and without setting the database login, but this isn't much help in the real world. The ReportEngine tutorial was apparently written by someone else, and is little or no help.
This seems like such a simple question, but I have wasted an entire day and am no closer to the answer.

I think the following resources will help:
https://wiki.sdn.sap.com/wiki/display/BOBJ/GettingStartedwiththeWebServicesSDK
http://help.sap.com/businessobject/product_guides/xir2PP/en/qaaws.pdf
http://devlibrary.businessobjects.com/BusinessObjectsXIR2SP2/en/en/WS_SDK/wssdk_server/default.htm
Also, see this forum thread:
Web Services SDK secLDAP
Ludek

Auto login into web then maintain session

I wanna create a java application that will be used to access a web page with username, password and captchaText. Since I cannot read the capchaText via java programming, user have to write it down after viewing the JEditorPane.
Thanks in advance...

What the question I have is that.
Could you show me a way to develop this application? Actually I have tried several times to accomplish it but I had several obstacles.
Some of these are:
1-Once I reveal web page on JEditorPane to get captchaText, I send a post request including username,pass, captcha text.
But this request doesnot allow mw to connect web page since second connection means different captcha text.
displayEditorPane.setPage(pageUrl);
2-to overcome this problem, I decided to use same URLConnection through the code below.
conn=url.openConnection();
HTMLEditorKit kit = new HTMLEditorKit();
Document doc = kit.createDefaultDocument();
kit.read(conn.getInputStream(), doc, 0);
displayEditorPane.setDocument(doc);
In there I have an other problem when using this URLConnection:
conn.setDoOutput(true);
OutputStreamWriter wr = new OutputStreamWriter(conn.getOutputStream());
wr.write(data);
İf there is an application like what I want I can have a look at it.

Using Auto Fill with web sites often used

How do I turn on the "Auto Fill" Name and Pass Word, For a site I previously stated " Never for this site?
So that I can quickly access the site without filling in all the details when ever I wanty to use the site.

Try the Tiny Menu extension. I am using an older version of Tiny Menu on Lucid with Firefox 3.6.x and it works fine.

HREAP local switching with web auth

Hello All,
Does web authentication work perfectly fine while locally switching the SSID on Hreap mode APs with older WLC firmwares - 7.0.98.218.
I see it is supported in 7.0.116.0 onwards. Does it work on older versions? Has anyone tested and faced any issues?
Thanks
Jeen

It worked as far back as 4.0 from what I remember
Steve
Sent from Cisco Technical Support iPhone App

Mac OS 9 auto login with multiple users

Is there a way to have a mac running Mac OS 9 set up with multiple users autologin to one of the accounts?
Ok, since I know people will ask why do you want to do that. I have an old mac and found my old XTension home automation software. I want to make this machine a dedicated home lighting controller. (I have a new mac mini doing this in my house, but I wanted to play with the old machine for fun). Now, I have multiple users set up and one account for home automation that has the panel version of the finder and the only application visible is XTension. This all works great.
If the power goes out, I want the machine to reboot into this home automation account automatically. I also want to have the machine power cycle once a week just to keep from any memory problems etc.
Oops, sorry, i just realized there is another section for OS 9.x.
Message was edited by: Mark Miller8

If you are using this for just Home Automation, why not turn off the "Multiple Users" add-ons and have it revert to a single-user system. Look at the "Multiple Users" Control Panel.

WLC 5508- how to setting up with Web auth with 2 profile

Hi Guys,
I wanted to control the 2 different profile to access internet with Cisco default landing page is that possible??
Example:
When connnected the SSID will redirect to Cisco landing pages
Cisco landing pages will differentiate there is member or guess with the password key in.
Member can access internet for 30 minute
guess only can access internet for 15 minute

Just some notes on WebAuth in the WLC. The timeout is specified per SSID so there would be no way to set a timeout unless you use a radius server and send a radius attribute to the WLC to set the session timeout.
So we really need to know if you have a radius server, is the radius server tied to Active Directory or is the plan just using the WLC for everything.
Sent from Cisco Technical Support iPhone App

WLC 7.5 Sleeping clients with ISE and Central WEB Auth(CWA)

Hi there,
Is it possibe to use sleeping clients when using ISE and CWA?
I was thinking of enabling layer3 auth with web auth on mac auth failure, but will that work with CWA?
Or is the only solution to use LWA?

Controller-> General-> User Idle Timeout (seconds) = 50 000 sec.
And your users will be connected all this time even if they going in sleepmode
be carefull with CPU loading

Auto login with web auth?

Similar Messages

Maybe you are looking for