ISE 1.2 Redirect using CWA Wireless

[awatson20]

Once a wireless user is authenticated to a WLAN using CWA and ISE, what are the parameters that can cause the user to be deauthenticated and redirected to the web portal?  The session timeout and user idle timeout in this scenario are set to 24 hours.  What else could cause the user to be redirected to the portal?

[tremesha42]

I am also experiencing the same problem on my WLAN and am using 5508 controllers running 7.4.121 and ISE 1.2 with patch 7. I did not start seeing this issue until I upgraded my WLCs to 7.4.121 and now some guests are continually having to re-enter their credentials into the ISE Guest Portal. Increasing the session timeout and user idle timeout values did not work.

[awatson20]

Its a wireless controller bug.  You will have to get an engineering build from Cisco to resolve.

CSCul43158

Description

Symptom:Wireless devices are randomly disconnected every 5-10 minutes with unknown policy timeout message in debug client - example:

*apfReceiveTask: Nov 07 14:27:32.113: 00:11:33:d2:ef:0c 192.168.25.165 RUN (20) Unknown Policy timeout

*apfReceiveTask: Nov 07 14:27:32.113: 00:11:33:d2:ef:0c 192.168.25.165 RUN (20) Pem timed out, Try to delete client in 10 secs.

Conditions:Clients using Central Web Authentication (CWA).
Workaround:none

[tremesha42]

I got the WLC image from TAC and am no longer experiencing the issue. Thanks so much.