Symptom

- CWA clients are stuck in Web Auth Pending state with full access to the internet. - The login page appears only when entering the URL manually. - On the WLC, redirect ACL and URL are applied.

Conditions

- There is an extra ‘permit any’ rule on the AP which is the reason why clients have full access: * On the WLC: Extended IP access list ACL_REDIRECT 11 deny tcp any host ... ... 112 deny udp host ... 200 permit ip any any * On the AP: ACL_REDIRECT rule 0: allow true rule 1: allow true and dst ... ... rule 12: allow true and src ... rule 13: deny true rule 14: allow true

Workaround

- Entering the URL manually on the browser.

Further Problem Description