topic Re: Native Profiling (WLC v7.6) + Web Auth in Wireless

Native Profiling (WLC v7.6) + Web Auth

Dave Anthony David — Mon, 05 Jul 2021 07:21:05 GMT

Hi All,

I am using WLC 5508 v7.6 and configured local client profiling [http and dhcp] in SSID with Web-Auth only. The profiling is configured to have Apple IOS devices mapped to certain VLAN and leaving other devices like Windows-Workstation to a default VLAN mapped to via AP Grouping.

This actually works when I am only using L2 (WPA-PSK) as authentication method. But when using L3 Web auth, we can't get the VLAN mapping works. But the device is properly profiled.

It this a limitation of this feature?

Regards,

Dave

Native Profiling (WLC v7.6) + Web Auth

Scott Fella — Thu, 06 Mar 2014 13:01:53 GMT

The reason for this is that WebAuth is a layer 3 authentication method in which the devices have to associate and obtain an ip address. You will not be able to set a vlan to a guest user, because they already have an ip address assigned to them. This is the same scenario when using ISE or any other radius. You would need to send a CoA and disassociate the device, know the mac so when it attempts to associate again, the WLC will put them on the correct vlan.... doesn't work this way though.

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

Re: Native Profiling (WLC v7.6) + Web Auth

Dave Anthony David — Fri, 07 Mar 2014 00:00:58 GMT

Hi Scott,

Thanks for the reply. So. You mean this is possible when using WLC and ISE?

Sent from Cisco Technical Support iPhone App