topic Cisco ISE - Guest Network in Network Access Control

Cisco ISE - Guest Network

David Boos — Mon, 11 Mar 2019 02:25:30 GMT

I'm attempting to setup our guest network with ISE and I am having problems getting the web agent to show up. I've attached the rules I'm using and the authentication information.

Cisco ISE - Guest Network

Tarik Admani — Tue, 14 Aug 2012 16:36:34 GMT

David,

Try adding a condition where the posturestatus not equals to complaint. That should be under the Session dictionary.

thanks,

Tarik Admani
*Please rate helpful posts*

Cisco ISE - Guest Network

David Boos — Tue, 14 Aug 2012 16:51:00 GMT

This is the result now, not getting a web agent on authentication. Not sure why it says the posture status is not applicable.

Policy

Live Authorization

Re: Cisco ISE - Guest Network

Tarik Admani — Wed, 15 Aug 2012 00:13:33 GMT

How are you performing the web authentication (are you using local web authentication or central web authentication)?

Also the following which is documented in the latest WLC 7.2.110 release notes:

"RADIUS NAC with Layer3 web authentication security (local web authentication) is not supported."

Thanks,

Tarik Admani
*Please rate helpful posts*

Cisco ISE - Guest Network

Venkatesh Attuluri — Thu, 18 Jul 2013 09:29:05 GMT

FYI

WLC 7.1.x only supports LWA, not CWA. WLC 7.2.x, which is compatible with the 2500, 5500 series and WiSM 2 WLCs supports either CWA or LWA. WLC 7.1.x Non-802.1X WLANs (including those using LWA) do not support MAB, CoA, Posture, Profiling; WLC 7.2 MR1 Non-802.1X WLAN supports CoA and profiling. VLAN assignment is possible with MAC Filtering, but not LWA