Symptom

Central Web Authentication support in WLAN for Mobility Express Deployments requires pre-auth ACL. In Mobility Express, ACL would be Automatically created but not completely. User is still expected to add the required rules for DNS and RADIUS Authentication Server which is hosting the portal for device registration.

Conditions

Cisco Mobility Express Deployment Guide 8.7 and 8.8, under Central Web Authentication Support on WLAN https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-7/b_cisco_mobility_express_8_7/b_cisco_mobility_express_8_7_chapter_0110.html https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-8/b_cisco_mobility_express_8_8.pdf

Workaround

Further Problem Description