Showing results for 
Search instead for 
Did you mean: 
ISE 2.3 Patch 7 has been posted. This will be the last patch for the ISE 2.3 release!
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

Cisco Employee

Aruba Controller with ISE CWA portal authentication Issue

HI everyone , who had been test Aruba controller with ISE 2.2 guest portal authentication . we want know on iphone or android can be auto pop up portal ?  if you had been test it . pls give me some tips .

In our poc test , guest can not auto pop up portal on iphone and android. we must manual open broswer and enter any url and redirect to ISE guest sponsor portal. CNA is disable on Aruba controller .

Some know issue . pls help me , thks

Our Aruba configuration as below is our ISE address

ip access-list session global-sacl

ip access-list session test-ise

  any host any  permit

  any host any  permit

ip access-list session apprf-test-ise-init-sacl

user-role test-ise-init

captive-portal "test-ise"

access-list session global-sacl

access-list session apprf-test-ise-init-sacl

access-list session test-ise

access-list session logon-control

access-list session captiveportal

aaa authentication-server radius "test-ise"

   host ""

   key 6abc2531bf352bba35090e35aa3b7ee2


aaa profile "test-ise"

   initial-role "test-ise-init"

   authentication-mac "xxx-internet-mac"

   mac-default-role "xxx-guest"

   mac-server-group "test-ise"

   radius-accounting "test-ise"


   rfc-3576-server ""

aaa server-group "test-ise"

auth-server ciscoise2

aaa profile "xxx-guest"

   initial-role "xxx-guest"

aa authentication captive-portal "test-ise"

   default-role "xxx-guest"

   server-group "test-ise"

   no logout-popup-window

   login-page ""

   no enable-welcome-page

ip access-list session xxx-guest

  any any svc-dhcp  permit

  user any svc-dns  permit

  user any svc-icmp  permit

  user   alias guest-server any  permit

  user   alias UAP any  permit

  any host any  permit

  any host any  permit

  user   alias xxx-internal any  deny

  user any any  permit

Everyone's tags (5)
Cisco Employee

Re: Aruba Controller with ISE CWA portal authentication Issue