topic Re: ISE Provisionning in Network Access Control

ISE Provisionning

Rodelanuit — Mon, 11 Mar 2019 02:50:13 GMT

Hi all,

I currently test Cisco ISE virtual appliance and I have some question about functionnalities and provisionning.

I already bind my ISE appliance with a windows server 2008 enterprise to realize SCEP. I begin with this product, so I commit maybe some mistakes.

1. To use guest portal, is-it possible to access without url-redirect-acl ? In my opinion, it's not possible because ISE don't accept request without the good session-id.

2. Can we use url-redirect-acl on a autonomous access point ? or only with WLC ?

3. How Cisco Network Setup assistant (Android apps) detect my ISE ?

4. There are other possibilites to do provisionning except Guest portal ?

Any help or suggestion will be appreciated.

Re: ISE Provisionning

jw.sl9 — Wed, 05 Dec 2012 22:29:27 GMT

Responses inline

Rodelanuit wrote:

Hi all,

I currently test Cisco ISE virtual appliance and I have some question about functionnalities and provisionning.

I already bind my ISE appliance with a windows server 2008 enterprise to realize SCEP. I begin with this product, so I commit maybe some mistakes.

1. To use guest portal, is-it possible to access without url-redirect-acl ? In my opinion, it's not possible because ISE don't accept request without the good session-id.

No.

2. Can we use url-redirect-acl on a autonomous access point ? or only with WLC ?

WLC only.

3. How Cisco Network Setup assistant (Android apps) detect my ISE ?

See the following (same page):

http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_client_prov.html#wp1054662

http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_client_prov.html#wp1254747

4. There are other possibilites to do provisionning except Guest portal ?

The ISE Admin portal can provision Guests or Active Guests as desired. The administrator just needs to greate accounts with that are in a Guest group. There is the Sponsor Portal as well (mentioning as that is technically different than the Guest Portal)

Any help or suggestion will be appreciated.

I hope you find this answer useful, if it was satisfactory for you, please mark the question as Answered.

Please rate post you consider useful.

-James

Re: ISE Provisionning

Rodelanuit — Thu, 06 Dec 2012 12:54:19 GMT

Hi James,

Thanks for your information.

My question 4 wasn't enough specific. To be more specific, is-it possible to realize scep enrollement with My Android and Cisco Agent without WLC ?

Re: ISE Provisionning

Rodelanuit — Fri, 07 Dec 2012 12:33:05 GMT

I find answer :

http://www.cisco.com/en/US/docs/security/ise/1.1.1/compatibility/ise_sdt.pdf