topic Re: Dynamic VLAN Assignment ISE and WLC in Network Access Control

Dynamic VLAN Assignment ISE and WLC

Dan Davis — Mon, 30 Apr 2018 13:58:26 GMT

Hi,

I'm not able to find a current document that shows an example of configuring a Cisco WLC with ISE. Specifically how to configure each side, ISE and WLC, for dynamic VLANs.

There is this - circa 2012 using ACS:

Dynamic VLAN Assignment with RADIUS Server and Wireless LAN Controller Configuration Example - Cisco

Re: Dynamic VLAN Assignment ISE and WLC

edeloscobos — Mon, 30 Apr 2018 16:51:18 GMT

Hi danda,

You can find a lot of guide regarding ISE design and deployment here:

ISE Design & Integration Guides

For specific WLC & ISE integration, here is the guide:

How To: Universal Wireless Controller (WLC) Configuration for ISE

I hope you can find it useful.

Regards,

Eduardo

Re: Dynamic VLAN Assignment ISE and WLC

Craig Hyps — Mon, 30 Apr 2018 22:01:29 GMT

There are many ways to effectively change the VLAN/WLAN for wireless user. In addition to IETF tunnel attributes as

discussed in the original guide referenced, ISE can return other vendor specific attributes (in this case Aerspace).

See ISE Network Access Attributes

Aerspace-WLAN-Id - Most common method to assign specific WLAN on WLC
Aerspace-Interface-Name - the interface associated with a specific VLAN
Aerspace-Guest-Role-Name - can return group policy which translates to local policy on WLC

Craig

Re: Dynamic VLAN Assignment ISE and WLC

craiglebutt — Thu, 07 Jun 2018 11:42:32 GMT

Did you get this working?

I've been working trying to get this to work, but with no avail.

Be interested to see how you completed this

Cheers