topic Flexconnect Authen Using ISE in Wireless

Flexconnect Authen Using ISE

tppatrick1 — Thu, 14 Dec 2023 16:59:21 GMT

Hi All,

Do we need any special configurations on ISE and Flexconnect SSID to authenticate with username and password? We are using C9800-CL

Any help or support is appreciated.

Thanks

Re: Flexconnect Authen Using ISE

MHM Cisco World — Thu, 14 Dec 2023 17:14:35 GMT

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/216130-configure-catalyst-9800-wlc-ipsk-with-ci.html

Check this guide it for iPSK but also apply to PSK.

MHM

Re: Flexconnect Authen Using ISE

Mark Elsen — Thu, 14 Dec 2023 18:16:16 GMT

- In essence not , meaning the authentication schemes will not vary on Flexconnect ; you can always have a review of the intended C9800-CL configuration with the CLI command show tech wireless and feed the output into Wireless Config Analyzer

Re: Flexconnect Authen Using ISE

Ambuj M — Fri, 15 Dec 2023 03:38:28 GMT

Your Network Access Device (NAD) will be AP subnet if the authentication is no set to central and it will be Controller mgmt IP if your authentication is central (which most people would do), policy logic will remain same more or less, you can read more here

Re: Flexconnect Authen Using ISE

tppatrick1 — Fri, 15 Dec 2023 17:09:08 GMT

Thank you so much @MHM Cisco World

Re: Flexconnect Authen Using ISE

tppatrick1 — Fri, 15 Dec 2023 17:09:33 GMT

Thank you

Re: Flexconnect Authen Using ISE

MHM Cisco World — Fri, 15 Dec 2023 17:10:22 GMT

You are so welcome friend

MHM

Re: Flexconnect Authen Using ISE

tppatrick1 — Fri, 15 Dec 2023 17:11:22 GMT

Thank you, @Ambuj M. I will go through the guide and feedback.

Re: Flexconnect Authen Using ISE

Rich R — Sun, 17 Dec 2023 19:45:48 GMT

> ISE to authenticate with username and password
Presume by that you mean web auth - for that you should refer to:
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html and
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-9/config-guide/b_wl_17_9_cg/m_vewlc_central_web_authentication.html

As Marce said flex local or central switching doesn't make much difference but it will need to be central authentication.

If you're referring to 802.1x then it can be done as flex local authentication whereby the AP sends the radius directly to the ISE for authentication independently of the WLC.
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213921-flexconnect-configuration-with-central-a.html

Re: Flexconnect Authen Using ISE

tppatrick1 — Sun, 17 Dec 2023 21:23:16 GMT

Thank you @Rich R I will use the links provided.