topic Re: Cisco ISE with Flexconnect Access Points in Network Access Control

Cisco ISE with Flexconnect Access Points

Maurice Ball — Fri, 12 Jun 2020 11:17:27 GMT

Is it possible to use Cisco ISE with a virtual WLC running the AireOS with the following features?

802.1x authentication

Guest Services with Central Web Authentication

Re: Cisco ISE with Flexconnect Access Points

balaji.bandi — Fri, 12 Jun 2020 11:51:18 GMT

here is the example Guide :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116087-configure-cwa-wlc-ise-00.html

Re: Cisco ISE with Flexconnect Access Points

Maurice Ball — Fri, 12 Jun 2020 12:45:36 GMT

Thanks for the information. I have already tried to follow the document you listed below with no success. Is it possible to setup Flexconnect AP to use Central Web Authentication and the access points are configured for local switching?

Re: Cisco ISE with Flexconnect Access Points

thomas — Fri, 12 Jun 2020 21:53:12 GMT

Yes, ISE works with virtual WLCs - it is validated in the ISE Compatibility Guide > Validated Cisco Wireless LAN Controllers.

This is how we do all of our ISE demos in Cisco's dCloud. Since we cannot assume the local [PoE] switch behind the AP has all of the correct VLANs configured, we disable FlexConnect Local Switching and backhaul the traffic. Your mileage may vary. Consult your wireless controller guide/architecture for the correct design.

If you are configuring this in your lab, consider using the ISE Wireless Setup Wizard to quickly configure this for you:

It should not be used for production networks since it does not consider any existing production settings when making configuration changes. This is why the menu is labeled as BETA.

Here are the ISE + Cisco Wireless configuration resources: http://cs.co/is-guides > Cisco Wireless

If you have further questions about troubleshooting this, please including configuration and error details .

Re: Cisco ISE with Flexconnect Access Points

Maurice Ball — Sat, 13 Jun 2020 09:20:48 GMT

Ok great. Thanks for the information.