topic ISE and Guest Portal access in Network Access Control

ISE and Guest Portal access

Jesica Ruiz — Thu, 28 Mar 2019 15:05:36 GMT

Hi All

We have running ISE 2.4 and we want to use a different interface for the Guest Portal, so Managment traffic is not affected

Can anyone explain how to configure another interface and the portal?

Thanks.!

Re: ISE and Guest Portal access

Mike.Cifelli — Thu, 28 Mar 2019 15:38:35 GMT

Assuming based on the question you are running ISE VMs. Add a new adapter in VMware. Open ISE cli for the node you want to add/configure the NIC. Typically the first NIC used is g 0 and your next one will be g 1. Go into global config, int g 1, and configure your ip address for the other subnet and no shut the interface. You will probably need to add static routes to send your guest traffic to g 1 gateway instead of default. To tell the portal to use the other interface, you configure this under portal settings (work centers->guest access->portals&components->guest portals->portal settings. Select the interface you wish to use.

Some things to consider: you may need to use static IP in your authz profile for this new interface/ip for cwa redirect. Also, make sure your default acl_webauth_redirect acl has the proper configuration after change so that hosts that should be redirected to the portal are permitted and can get there.

HTH!

Re: ISE and Guest Portal access

Jason Kunst — Thu, 28 Mar 2019 15:42:33 GMT

You can see these settings under https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011100.html#reference_1F6EF09DE16E480096C2619625C256C5