topic WLC Authentication using pre-shared key with ISE in Network Access Control

WLC Authentication using pre-shared key with ISE

erajca — Sat, 09 Mar 2019 03:13:19 GMT

We are trying to set up ISE to manage medical devices where the devices are authenticated with the WLC using a pre-shared key.

My question is whether we are able to create an authorization profile and drop this device into a specific vlan even though the authentication takes place on the WLC.

Is this possible ?

Thanks,

Re: WLC Authentication using pre-shared key with ISE

paul — Thu, 21 Feb 2019 16:26:56 GMT

Yes, if you enabled MAC Filtering under the WLAN and point at ISE you will be doing Wireless MAB authentication in addition to the PSK being done by the WLC. Once you have control of the session in ISE you can use profiling/whitelisting to assign different devices to different VLANs.

Re: WLC Authentication using pre-shared key with ISE

Jason Kunst — Thu, 21 Feb 2019 16:41:26 GMT

Mab authenication authorizations with ise support pre shared key

You can look at http://cs.co/ise-guest and the prescriptive guide there. It talks about vlan changes with CWA logins

If you’re doing iPsk with no CWA I would think you could assign vlans check http://cs.co/ise-byod look for psk there