topic Re: New ISE Guest Connect Setup in Network Access Control

New ISE Guest Connect Setup

s.kanth — Fri, 21 Feb 2020 18:47:44 GMT

Hi Guys,

I'd like to setup a ISE (Cisco UCS C220 M4) for Guest Web Authentication.

It is a physical box.

An IP address is assigned to GiETH0 port with 10.20.20.20.

Guest users connect to SSID and get IPs from ISE in 192.168.1.0/24

Do I need to create an another interface with different VLAN on ISE box.

Please help.

Re: New ISE Guest Connect Setup

Octavian Szolga — Wed, 07 Mar 2018 11:46:04 GMT

Hi,

That's up to you. If you want to, you can create a dedicated guest interface for this service, or you can use the same management/radius traffic interface.

If you use a special interface for guest services you need to add a static route for the guest LAN + some alias so that the redirect would work properly.

Either way you have to allow your guest machines to connect to ISE's guest portal.

Check ISE ports reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/install_guide/b_ise_InstallationGuide23/b_ise_InstallationGuide23_chapter_0110.html

Regards,

Octavian

Re: New ISE Guest Connect Setup

s.kanth — Wed, 14 Mar 2018 01:03:32 GMT

Web auth page is getting redirected,but it is getting looped even after successful login.