topic Re: Cisco ISE and Aruba integration in Network Access Control

Cisco ISE and Aruba integration

JADF — Fri, 04 Jul 2025 10:12:05 GMT

Hi,

I have an ISE running version 3.3, and I have the Aruba IAP running Aruba virtual controller.

I'm trying to use ISE to generate a captive portal for the wireless users.

Now the users are able to get the portal but once they are authentoicated, they are receiving a white screen with no internet connection.

Any idea what could be the problem here?

P.S: I'm new to ISE.

Thanks in advance for your help.

Regards,

Re: Cisco ISE and Aruba integration

Mark Elsen — Fri, 04 Jul 2025 10:15:07 GMT

- @JADF FYI : https://community.cisco.com/t5/security-knowledge-base/how-to-cisco-ise-captive-portals-with-aruba-wireless/ta-p/4633904
( https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200270-ISE-2-0-3rd-Party-integration-with-Aruba.html )

Re: Cisco ISE and Aruba integration

Mark Elsen — Fri, 04 Jul 2025 10:18:00 GMT

- @JADF On ISE you can follow up on authentications using : Operations > RADIUS > Live Logs
Now since apparently the user gets authenticated ; the white screen issue could be something else
(but verify correct authentication on ISE first indeed)

M..

Re: Cisco ISE and Aruba integration

JADF — Fri, 04 Jul 2025 10:22:09 GMT

Hi Marce1000, and thank you for the response.

Actually i followed both guides, one is configuring the portal for BYOD access, which is different to waht we are trying to do, and the other is using mobility controller not a virtual one.

Re: Cisco ISE and Aruba integration

MHM Cisco World — Fri, 04 Jul 2025 12:18:04 GMT

CoA defualt port of ISE is 1700

I think aruba use different port check this point

MHM

Re: Cisco ISE and Aruba integration

JADF — Fri, 04 Jul 2025 12:20:52 GMT

Thanks for your response, actually we are using port 3799

Re: Cisco ISE and Aruba integration

MHM Cisco World — Sat, 05 Jul 2025 11:52:26 GMT

Any update about this issue ?

Did you check radius live ?

MHM

Re: Cisco ISE and Aruba integration

ahollifield — Mon, 07 Jul 2025 20:02:12 GMT

Aruba IAP does not support the necessary VSAs for dynamic URL redirection. You need to use AOS 10 managed by Aruba Central instead. If you must stick with IAP, then you need to use the ISE DHCP/DNS server instead.

https://cs.co/ise-berg#aruba

Re: Cisco ISE and Aruba integration

JADF — Mon, 07 Jul 2025 22:23:12 GMT

Thank you, I appreciate your response.

I guess you are pointing to the dns sinkholing.

Would you please lead me to any documentation on how to configure DNS sink hole in ISE?

Thanks,

Re: Cisco ISE and Aruba integration

ahollifield — Mon, 07 Jul 2025 22:45:52 GMT

Yes, however it’s an extremely rare and underutilized feature in the field. Why can you not just use AOS10? The user experience will also be far better.

Re: Cisco ISE and Aruba integration

JADF — Mon, 07 Jul 2025 23:07:00 GMT

Actually, upgrading is almost impossible. That's why I need a documentation about this particular case.

If you can help, it will great.

Thanks anyway,

Re: Cisco ISE and Aruba integration

ahollifield — Mon, 07 Jul 2025 23:37:52 GMT

“Almost impossible” what does that mean? No one should really be using IAP in 2025. AOS10 with Aruba Central is the way forward.