ISE 2.3 as Radius Server with IP-Pool oder DHCP

knsh2003 — Thu, 14 Sep 2017 09:02:55 GMT

Hi there,

I would like to user ISE as Radius-Server on VMware for our Smartphones! I had tried to figure it out with using DHCP-Service function enabling on ISE, but unfortunately didn#t work perfect. so I would like to you, if anyone can provide/help/support me to configure it correctly.

any useful recommendation or infos R welcome!

this article didn't help actually : Configure Third-Party NAD Redirection on ISE 2.1 - Cisco

great time,

cheers, Keyvan

Re: ISE 2.3 as Radius Server with IP-Pool oder DHCP

bravojared — Thu, 28 Sep 2017 00:08:39 GMT

This is not a use case for the DHCP Server in ISE.

The DHCP/DNS server functionality in ISE is to assign IP Addresses and take all DNS requests from clients (Except those domains excluded) and redirect them to ISE server. The purpose/goal for this is to intercept traffic when the NAD is not aware of how to redirect. So, the only domains that would NOT be redirected to ISE require:

1. Specified in External Domain List to respond with real IP address.

2. External DNS Servers are populated.

Since you can't put every domain that you would want to reach their real addresses in the box for #1, this is not a supported use case for DHCP/DNS Server in ISE for general purpose DHCP/DNS.

Suggest you use something else for DHCP scope (Controller, switch, etc) and point to a valid DNS server.

topic ISE 2.3 as Radius Server with IP-Pool oder DHCP in Network Access Control

ISE 2.3 as Radius Server with IP-Pool oder DHCP

Re: ISE 2.3 as Radius Server with IP-Pool oder DHCP