topic Re: ISE as External Webauthentication server in Network Access Control

ISE as External Webauthentication server

ysethu — Fri, 16 Nov 2018 07:30:06 GMT

Hi,

I have a scenario where I wanted to configure ISE as acting as external webauth server for my wireless lan controller. As of now I am able to configure wireless controller with portal url present in ISE but still I am facing redirection issues. Will explain further on this if any understanding is required. Any help on this would be really great .I am using ISE version 2.1.

If any configuration guide for the same will also be helpful.

Thanks,

S.Yasodhapriya

Re: ISE as External Webauthentication server

Jason Kunst — Fri, 16 Nov 2018 11:41:04 GMT

Please explain why you would do this and complicate and make your experience worse?

It seems like you’re trying to do LWA pointing to ise?

Re: ISE as External Webauthentication server

ysethu — Fri, 16 Nov 2018 12:36:19 GMT

Hi Jason,

One of our customer has deployed this way and we wanted to verify the same scenario for the same.Hence , looking for a solution.I followed the below configuration guide for section "Configure the External ISE as the Webauth URL Globally".

But I do face some redirection issues hence looking help.

https://www.cisco.com/c/en_intl/support/docs/security/identity-services-engine/116217-configure-ISE-00.html#anc10

Re: ISE as External Webauthentication server

paul — Fri, 16 Nov 2018 14:19:06 GMT

What is their justification for using this setup? Just because that is how they currently have it setup doesn't mean it is necessary. As the link you posted says "This document describes the configuration of LWA. However, Cisco recommends that you use Centralized Web Authentication (CWA) with the ISE whenever possible. " I have done over 75 ISE installs and have never had a use case or reason to use LWA.