topic CWA Session Handled by Two PSN in Network Access Control https://community.cisco.com/t5/network-access-control/cwa-session-handled-by-two-psn/m-p/3560332#M520158 <HTML><HEAD></HEAD><BODY><P>Two node ISE cluster. One outside the FW.&nbsp; The other inside the firewall. Customer would like to have initial WLC RADIUS request be sent to the internal ISE.&nbsp; The internal ISE would then send a radius URL redirect for the Outside ISE to the client.&nbsp;&nbsp; The customer does not want to put any firewall holes or second interfaces on the Outside-ISE.&nbsp; Would like that ISE to remain completely outside the firewall. Is this scenario&nbsp; possible for Inside-ISE to start the session and hand off to Outside-ISE session ownership?</P></BODY></HTML> Mon, 06 Nov 2017 14:39:35 GMT scamarda 2017-11-06T14:39:35Z CWA Session Handled by Two PSN https://community.cisco.com/t5/network-access-control/cwa-session-handled-by-two-psn/m-p/3560332#M520158 <HTML><HEAD></HEAD><BODY><P>Two node ISE cluster. One outside the FW.&nbsp; The other inside the firewall. Customer would like to have initial WLC RADIUS request be sent to the internal ISE.&nbsp; The internal ISE would then send a radius URL redirect for the Outside ISE to the client.&nbsp;&nbsp; The customer does not want to put any firewall holes or second interfaces on the Outside-ISE.&nbsp; Would like that ISE to remain completely outside the firewall. Is this scenario&nbsp; possible for Inside-ISE to start the session and hand off to Outside-ISE session ownership?</P></BODY></HTML> Mon, 06 Nov 2017 14:39:35 GMT https://community.cisco.com/t5/network-access-control/cwa-session-handled-by-two-psn/m-p/3560332#M520158 scamarda 2017-11-06T14:39:35Z Re: CWA Session Handled by Two PSN https://community.cisco.com/t5/network-access-control/cwa-session-handled-by-two-psn/m-p/3560333#M520159 <HTML><HEAD></HEAD><BODY><P>researching</P></BODY></HTML> Mon, 06 Nov 2017 15:52:13 GMT https://community.cisco.com/t5/network-access-control/cwa-session-handled-by-two-psn/m-p/3560333#M520159 Jason Kunst 2017-11-06T15:52:13Z Re: CWA Session Handled by Two PSN https://community.cisco.com/t5/network-access-control/cwa-session-handled-by-two-psn/m-p/3560334#M520160 <HTML><HEAD></HEAD><BODY><P>This will not work as there is no session hand-off from one PSN to another.</P><P></P><P>What about using WLC anchor and foreign, for example?</P></BODY></HTML> Mon, 06 Nov 2017 15:58:49 GMT https://community.cisco.com/t5/network-access-control/cwa-session-handled-by-two-psn/m-p/3560334#M520160 Jason Kunst 2017-11-06T15:58:49Z