Cisco ISE and Support for Ubiquiti UniFi SHD (UAP)

[gaoppel]

I have question around anyones experience of what is supported from the ISE standpoint if utilizing Ubiquiti UniFi SHD (UAP) access points.  From the searching I have done it appears that the system does support Radius authenitcation, but not sure if anyone can speak to their experience on this matter.  Assuming it is basic Radius, then just Access-Accept or Reject will be supported, but looking to see if someone has a few more details that might assist in understanding what might or might not work.

Let me know if you have any further clarifying questions.

-Gary

[howon · Accepted solution]

I don't have experience with Ubiquiti AP, but looks like basic 802.1X is supported:

https://blog.ubnt.com/2016/11/04/managing-radius-authentication-unifi/

MAC filtering seems to be supported, but cannot be combined with guest access according to this posting:

https://community.ubnt.com/t5/UniFi-Wireless/Mac-Filtering-and-Guest-Policy/td-p/1932393

Guest access supports external portal but have not tested it with ISE:

https://help.ubnt.com/hc/en-us/articles/115000166827

[Jason Kunst · Accepted solution]

If all else fails remember you can use the auth vlan dhcp dns feature of ise as well


https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01000.html