Cisco Catalyst 2960 Series

This illustration displays the packet flow that redirects a user to the originally requested URL:
Figure 103: Original URL Redirection Packet Flow
1
A user accesses a network for the first time and sends an HTTP request to access www.google.com. When
the user first accesses the network, a MAC authentication bypass (MAB) is triggered and the MAC address
is sent to the Cisco ISE.
2
The Cisco ISE returns a RADIUS access-accept message (even if the MAC address is not received) along
with the redirect access control list (ACL), the ACL-WEBAUTH-REDIRECT message, and the guest
web portal URL to the device.
The RADIUS message instructs the device to open a port that is restricted based on the configured port
and the redirect ACLs, for regular network traffic.
Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)
1427
Information About Web-Based Authentication