CISCO ISE

Dannyz8703 — Mon, 11 Mar 2019 06:36:55 GMT

I am deploying a CISCO ISE and i'm not sure about the following, i would appreciate if you guys can enlighten me

Q1 - When each time client connect to wifi, after the first time authentication pass. When next time client reconnect to wifi, does the ISE require to check user credential with AD again or ISE will authorized user wifi connection without checking with AD anymore since ISE already store user information within the ISE ?

Q1 - When user connect LAN network every time, does user require to keyin user credential ( username & password ) or It can set only keyin one time so that the next time user connect to LAN again it will get internet access without keyin user credential anymore.

AD
Q1- When i have integrate with multiple AD, does it will require client to take longer time to complete the authentication process ?

Hi there! Here are my answers

nspasov — Mon, 28 Mar 2016 03:34:56 GMT

Hi there! Here are my answers:

Q1: You control this with the session timeout value located under "WLANs > Name of your SSID > Advanced > Enable Session Timeout"

Q2: Yes, when the client disconnects an EAPOL-Logoff message will be sent. Thus, when the client re-connects, it will have to present its credentials again.

Q3: No, integrating ISE with multiple AD domains will not cause longer authentication process.

Thank you for rating helpful posts!

topic CISCO ISE in Network Access Control

CISCO ISE

Hi there! Here are my answers