topic ISE Guest Authentication using WLC in Network Access Control

ISE Guest Authentication using WLC

danielnunes — Mon, 11 Mar 2019 03:32:24 GMT

Folks,

i am using the guest portal on ISE and WLC and i saw that all papers and guides are requesting that you need to use the Authentication (Web Policy) under Layer 3 security WLAN but for me just using the Passtrough option works fine, when i use the Passthrough option the guest cannot authenticate and the Auth Guest page still requesting me the credentials.

Thanks a lot

Re: ISE Guest Authentication using WLC

Richard Atkin — Fri, 14 Jun 2013 07:14:24 GMT

Please DO NOT use the WebAuth Config in the WLC, it doesn't work properly. Your best bet is to review the TrustSec 2.1 guide... It will show you how to do MAB and CWA to achieve your goal.

Richard.

Sent from Cisco Technical Support iPad App

ISE Guest Authentication using WLC

Nicholas Poole — Fri, 14 Jun 2013 09:35:33 GMT

Not all docs say use web policy as L3, only the docs that are about how to setup L3 Web Auth are. Docs are normally written for a specific example in mind. Depending on what your own policy and circumstances are you might need to use LWA, L3 external Web Auth, or maybe just L2 MAC filtering for CWA.

Re: ISE Guest Authentication using WLC

danielnunes — Fri, 14 Jun 2013 13:46:25 GMT

Guys, thanks for that responses, i ll check all this things.

If someone has a example or a good paper about CWA and MAD please post it to me.

Thanks a lot

ISE Guest Authentication using WLC

Nicholas Poole — Sat, 15 Jun 2013 00:08:52 GMT

what controller model and what software are you running?

ISE Guest Authentication using WLC

danielnunes — Sat, 15 Jun 2013 11:56:08 GMT

I've checked and i am running 7.0 version, i saw on the Trust Sec 2.1 que i can not configure WLC usng the CWA, just under 7.2 or later.

this way i need still using web redirect on WLC.

thanks a lot

ISE Guest Authentication using WLC

myanznki — Mon, 24 Jun 2013 07:41:49 GMT

you can use LWA, but you must be carefull using WLC, it can't redirect HTTPS traffic due to bugs

https://tools.cisco.com/bugsearch/bug/CSCar04580

and i think there is still problem about certificate with LWA, so sometimes need to disable secure-web web-auth...

Re: ISE Guest Authentication using WLC

manjeets — Thu, 27 Jun 2013 12:51:12 GMT

Please find the attachment,