NAC Guest Registration - Different portals by Devicetype

[LeoP1]

Hi Guys,

I'm working on a NAC deployment for a customer, and we are having some issues with Guest Registration while using social media authentication. We use Advanced-Location in NAC.

To make it work as the customer asked, we need to use the Autologin from devices (using a browser is supported and better, but it raises issues with certificate errors, almos all sites are now HTTPS and we can't redirect it seamlessly, guests connecting and opening apps instead of browsers, etc)... But there's another issue: The Apple iOS devices WebKit is not allowed for Google auth...

I'm thinking about creating different portals for iOS and Others, where in the iOS portal the Google option should be supressed, but the Unregistered Loc rules can't be modified to choose Device Types.

I've cloned the rule and put it just above the NAC generated Unreg rule, just pointing to another portal, but it doesn't worked: The iOS device is redirected to the new "Googleless" portal, but not to the registration page... It shows a "Your device is registered, you are good to go" and stays in the Unreg-Clone role.

Any ideas?

Best regards,
-Leo

[Rodney_Lacroix]

Are you using the "Redirect Immediately" function on the network settings of the portals? If so, the default url for redirect immediately is the Google favicon via https. If you're allowing https in your unregistered policy (i.e., to Google, specifically or on a broader scale) then you'll get stuck in a loop here, because we assume that the url is only accessible on a completed registration.

If not, then some debugging might be needed.