Cisco Bug: CSCup98797 - DNS-Based ACLs only work with radius NAC

Last Modified

Feb 04, 2017

Products (1)

Cisco 5500 Series Wireless Controllers

Known Affected Releases

7.6(120.0)

Description (partial)

Symptom:
The configuration guide constantly refers to the use of ISE when explaining how DNS-based ACL work. However it does not state anything clearly. It turns out, DNS-based ACLs only work when Radius NAC (Central webauth or Posture) are done on the SSID. It does not work with Local webauth or any other form of access-list than a redirect-acl used in the case of Radius NAC.

Conditions:
DNS based ACLs

View Bug Details in Bug Search Tool Login Required

Why Is Login Required?

Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

Full Description (including symptoms, conditions and workarounds)
Status
Severity
Known Fixed Releases
Related Community Discussions
Number of Related Support Cases

Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.

Learn More About Cisco Service Contracts