topic Re: Cisco ISE || Wireless User Tracking in Network Access Control

Cisco ISE || Wireless User Tracking

Kamil Sheriff — Sun, 23 Aug 2020 06:37:52 GMT

Hello,

We currently have 500+ APs in one of our client location connected to WLC.

I would like to know how we can configure ISE to locate the users connected to specific Wireless AP in WLC environment.

As for the switches, we can locate the user connected to specific switch on specific port. Can we configure in ISE where we can track user connected to specific AP.

Currently if we configure ISE with WLC, the location for the user shows as WLC.

Require your suggestions.

Re: Cisco ISE || Wireless User Tracking

Leo Laohoo — Sun, 23 Aug 2020 06:45:49 GMT

ISE will only tell you what AP the MAC address is connected to.
If you want per-room/per-square-metre location tracking then you'll need to reach out to your Cisco AM/SE and ask about DNA Spaces solution.

Re: Cisco ISE || Wireless User Tracking

Kamil Sheriff — Sun, 23 Aug 2020 06:50:29 GMT

Hello Leo,

How can we check in ISE which AP the MAC address is connected too?

As i can see in ISE, once we integrated WLC we can see all the mac-address connected to WLC instead of AP?

Re: Cisco ISE || Wireless User Tracking

Greg Gibbs — Mon, 24 Aug 2020 02:28:11 GMT

In the WLC (RADIUS Authentication and Accounting Servers), you can configure the string that will be used for the Called-Station-ID. You can specify a string that includes the AP name or MAC address. You will see that value in the detailed logs and can use string matches in your AuthC or AuthZ Policies if required.

Re: Cisco ISE || Wireless User Tracking

Leo Laohoo — Mon, 24 Aug 2020 02:46:22 GMT

@Kamil Sheriff wrote:

How can we check in ISE which AP the MAC address is connected too?

Operations > RADIUS > Live Logs.
Enter the MAC address into the Endpoint ID filter.
Click on the Authentication Detail Report and a new browser tab/windows appears.
Depends how it is configured in the WLC, the name of the AP should appear in the SSID line &/or the Calling-Station-ID line (under Other Attributes).

Re: Cisco ISE || Wireless User Tracking

Kamil Sheriff — Mon, 24 Aug 2020 07:47:34 GMT

Hi Greg,

Thanks, this is what i was looking for.

Cheers..!!