There is WLAN Controllers (WLC) 2006 that runs version 4.0.155.0, which has a guest Service Set Identifier (SSID) called 'guest' configured. The guest SSID is set up for web authentication. As soon as a guest account that is created in the localnet users section tries to connect, it can be associated to the radio but never web authenticated. There are attempts to open a web page timeout and it fails.

If the web authentication does not work then look for the Domain Name System (DNS) look-up, which needs to work before the redirect in order to happen. If the browser homepage on the wireless client points to a domain name, it needs to be able to do nslookup successfully once the client gets associated for the redirect to work. In order to narrow down the problem, try to use the IP address instead. Also try to log in with the use of the IP address on the client homepage.

Note: When the DNS server is used, it is ideally reachable from the management interface and the dynamic interface to which the client is associated to in order for the web authentication to work.

Web authentication probles are seen in version earlier than 3.2.150.10.  In order to resolve upgrade the controller to the latest version.

Refer to Troubleshoot Internal Web Authentication  section of Wireless LAN Controller Web Authentication Configuration Example for more information on Web-authentication.