topic Hello Teymur,The redirect ACL in Network Access Control

Cisco ISE Guest portal

teymur azimov — Mon, 11 Mar 2019 04:31:42 GMT

Dears,

I want to configurate guest portal(Central Web authentication) for wireless client on Cisco ISE. I confuse that:

Must i configure redirect ACL in switch? If yes which access-group or which interface i applied this redirect ACL?

I read that must be create redirect ACL in WLC.

Hello Teymur,The redirect ACL

Poonam Garg — Thu, 13 Mar 2014 08:56:49 GMT

Hello Teymur,

The redirect ACL need to be configured on WLC. This ACL is referenced in the access−accept of the ISE and defines what traffic should be redirected (denied by the ACL) and what traffic should not be redirected (permitted by the ACL). Basically, DNS and traffic to/from the ISE needs to be permitted.

For further details go through this document:

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

"Please rate helpful posts"

I also do my configuration

teymur azimov — Thu, 13 Mar 2014 09:01:58 GMT

I also do my configuration form these guide. In this guide write that:

reate the Authorization Profile

On the ISE, the authorization profile must be created. Then, the authentication and authorization policies are configured. The WLC should already be configured as a network device.

In the authorization profile, enter the name of the ACL created earlier on the WLC.

Click Policy, and then click Policy Elements.
Click Results.
Expand Authorization, and then click Authorization profile.
Click the Add button in order to create a new authorization profile for central webauth.
In the Name field, enter a name for the profile. This example uses WLC_CWA.
Choose ACCESS_ACCEPT from the Access Type drop-down list.
Check the Web Redirection check box, and choose Centralized Web Auth from the drop-down list.
In the ACL field, enter the name of the ACL on the switch that defines the traffic to be redirected. This examples usescwa_redirect.

this confuse me.

Hi,check the below link for

abwahid — Wed, 03 Sep 2014 07:06:48 GMT

Hi,

check the below link for configuration example for Switch and WLC.

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/113362-config-web-auth-ise-00.html

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

the ACL which you are

Venkatesh Attuluri — Wed, 17 Sep 2014 13:20:29 GMT

the ACL which you are referring to cwa_redirect should be configured on WLC not on switch if client type is wireless