09-24-2024 11:43 AM
I'm standing up a new pair of C9800-40 WLCs using Catalyst Center. So far so good. It seems to add all the settings when I provision the 9800 through Catalyst Center.
There's a few settings that I can't seem to find a way to include when the 9800 is provisioned.
Pre-Auth ACLs for Guest/Open SSIDs that use a external ISE appliance for CWA. I have the Pre-Auth ACLs on Catalyst Center, but it looks like you can only attach pre-auth ACLs to Enterprise SSIDs after enabling Posture. Is there a way to do that for the Guest SSIDs?
The second missing config is DHCP Required for the Wireless Profile Polices on the WLC. I can't seem to find a way to include that in the provisioned config that get's pushed to the WLC(s).
9800-40 17.12.04
Catalyst Center 2.3.5.6
09-24-2024 07:06 PM
DHCP required is done via a model config under the Advanced SSID configuration. You will then need to add it to the wireless network profile and map to the SSID
The Pre-Auth ACL is configured under network settings>wireless>Pre-Auth Access Control Lists
it is then added to the Guest SSID config
09-25-2024 12:50 AM
- Adding to notes from other poster ; once finished validate the configuration of the C9800 using the CLI command : show tech wireless and feed the output from that into Wireless Config Analyzer
Use the full command pointed out in green , do not use a simple 'show tech' for this procedure ,
M.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide