At the university where I work we have 1131 ap's on 4402 controllers. Occasionally a user will get the Cisco access page instead of the custom page we have set up to display. It happens with IE or Firefox, MAC or PC, I have even gotten it with Backtrack/Linux.

Any ideas?

I have a few questions that may help us give you assistance.

Are you able to isolate the problem to a specific... Physical location, Vlan, set of users, OS, time of day, etc.

Also, when it happens to a computer does it happen again? If so how soon?

Do you use DHCP to assign DNS to your clients?

And once you fix the problem on a hast, are you able to recreate the problem on purpose?

-Ian

@ luismg

I've only seen it about 4 or 5 times. Others have seen it too.

@ ianmprice

No it does seems to have any specific time, vlan, or O/S, it has happened in different buidings (controllers?)

Yes we use DHCP.

Have not been able to re-create on purpose (yet).

There's an open bug on 4402's you may hitting, see CSCtc03575:

Controller fails to redirect web authentication to external server

Symptom:

On a 4402-50 controller running 4.2.205.0, web authentication fails after sometime when redirect is done to an external web server URL .. log lines show sshpmAddWebRedirectRules: failed to create DNS ALG rule sshpmAddWebRedirectRules: http redirect rules creation failed.

Workaround: Accessing the web page https:// virtual ip address of WLC/login.html works successfully however A reboot of the controller restores access to the external server authentication page

Create a TAC Service Request with a detailed description of your problem including version informations and show-techs from your WLC's.