web-authentication

[eksantrik]

hi guys,

I ahve wireless nortel network here and I am using wpa2-psk with web-authentication...This network is for the internet connection and we have a local DNS server which was configured with forwarders pointing to the public DNS servers...The problem is when we connect to the wireless network with the laptops, open the web browser and punch in a web site, instead of directing us to the web page we want, the network directs us to the authentication page and asks for a username and password for authentication...everything is normal up to this point..However when we enter our user/pass, it authenticates us and tries to direct us back to the web page we entered in the first place but it cant do it and gives the error that it couldnt find the web page...When we open a new web prowser page and punch in the web site again, you are all good to go..We couldnt figure out how come there is a problem with the first attempt but we think there is a problem with the DNS server.....
other than this browsing problem in the first attempt, it works perfect..any idea?

thanks

 

[biv343]

What type of Nortel wireless? 2200 or 2300 series?

 

[eksantrik]

security switch 2380

 

[andy88]

Try generating a new web cretificate on the switch, with the IP address of the WSS guest vlan as the (CN) common name.

 

[eksantrik]

didn't work

any other ideas ?

 

[biv343]

Do you have the internal primary/secondary DNS servers configured? (set ip dns server x.x.x.x primary)

 

[eksantrik]

I set the local DNS server as the primary which by the way doesnt have a forwarder configuration on it..I set a public DNS as the secondary...
We have a DNS server in another site with the forwarder (name might be wrong) configuration in it but we are having the same problem there as well..
We set the DHCP options for the DNS server IP address and probably thats why the stations work properly after the first attempt but still we have no idea why the system doesnt let us go to the web page at the first attempt..

 

[Dualie]

yeah, we had the exact same issue- only on a 2380.
if you don't have your own custom splash screen, then Nortel defaults to their own. Create a user name/pass and you are good to go.

the fix was adding a static route in IP services field pointing the destination to the gateway of the DMZ.
voila - it worked great!
however, if you are running ver. 4.1.14 it webAAA won't work at all. either wait for 4.1.15 or go back to 4.1.11.

Dualie