topic Unfortunately, the project in Network Access Control

ISE and WLC dynamic interface group assignment ?

rmotzer — Mon, 11 Mar 2019 02:08:53 GMT

I have a somewhat large deployment coming up with several WLC dynamic interfaces assigned to an interface group, replicated across for multiple sites. I understand that ISE can return the VLAN ID to the WLC to place the client in, but if I'm using interface groups, this seems to negate the usefulness of the interface group to load clients across multiple VLANs. Not only that, but with the number of dynamic interfaces (VLAN ID's), multiplied by the number of sites, would seem to be overwhelming on the ISE side policy configuration.

Is it possible for ISE to return an Interface name/group to the WLC instead of just a VLAN ID ?

TIA

ISE and WLC dynamic interface group assignment ?

jrabinow — Thu, 31 May 2012 05:36:45 GMT

Is the interface name/group returned in RADIUS attributes; if so which ones?

Re: ISE and WLC dynamic interface group assignment ?

Frederick Reimer — Fri, 01 Jun 2012 01:20:54 GMT

Upgrade you WLC to 7.2 code:

http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7_2.html#wp919093

Sent from Cisco Technical Support iPad App

Re: ISE and WLC dynamic interface group assignment ?

rmotzer — Fri, 01 Jun 2012 05:31:45 GMT

I understand that WLC 7.2 code can now accept the interface group name as a AAA override, which is great, but it doesn't specify the AAA source (ISE vs. ACS).

This is the example I'm questioning: (they use the VLAN ID only, instead of an interface name)

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080bba10d.shtml#topic17

Edit:

Found the correct Attribute Under "Adv. Attribute Settings" in the Airspace Authorization Profiles (Airespace:Airespace-Interface-Name).

ISE and WLC dynamic interface group assignment ?

kristjan.edvardsson — Wed, 27 Nov 2013 23:06:26 GMT

Did it work for you to only send the

Airespace:Airespace-Interface-Name from ISE to WLC ?

Unfortunately, the project

rmotzer — Thu, 10 Apr 2014 14:43:54 GMT

Unfortunately, the project fell through, so I was unable to test.

Did it work for you ?

I use this for my setup and

Lonemaker — Tue, 24 Jun 2014 07:46:35 GMT

I use this for my setup and it is working perfectly.

ISE sets the client to the correct Interface (Name) in the Interface-Group

If I remember correctly. It

kristjan.edvardsson — Fri, 05 Sep 2014 09:08:28 GMT

If I remember correctly. It was the Airspace Interface name or similar

Can anyone update this ? I

Ben Meagher — Mon, 29 Dec 2014 15:59:32 GMT

Can anyone update this ? I too am curious about returning the group as opposed to the underlying specific interface.

Please use

guomizha — Wed, 03 May 2017 17:42:47 GMT

Please use

Airespace:Airespace-Interface-Name under Advanced Attribute Settings.

Airespace:Airespace-Interface

guomizha — Wed, 03 May 2017 17:44:00 GMT

Airespace:Airespace-Interface-Name works.