cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

69
Views
0
Helpful
2
Replies
Highlighted
Beginner

ISE Aruba integration issues

The integration of ISE with Aruba is being carried out.
ISE is in version 2.2 and is being integrated with an IAP that is in 8.5
The configuration was done by guiding us with the following document, where each step is explained well.

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-20/211406-Configure-Guest-Flow-with-ISE-2-0-and-Ar.pdf

At the moment of doing the test it is evidenced in the ISE logs of events of the Aruba device but the traffic sends it to the default policy. How can we validate what happens or what could be modified in the configuration?
Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ISE Aruba integration issues

There could be a couple things going on but most of the time it is the result of the RADIUS AV pairs not matching the correct authorization rule in your policy. You will have to modify your authorization rule so that it matches the RADIUS AV information coming from Aruba. Otherwise, you will continue to match the default authorization rule.

Regards,
-Tim
2 REPLIES 2
Cisco Employee

Re: ISE Aruba integration issues

There could be a couple things going on but most of the time it is the result of the RADIUS AV pairs not matching the correct authorization rule in your policy. You will have to modify your authorization rule so that it matches the RADIUS AV information coming from Aruba. Otherwise, you will continue to match the default authorization rule.

Regards,
-Tim
Beginner

Re: ISE Aruba integration issues

Hello,

According to the configuration recommended in the guide, this should work. Some changes have been made but it's still the same error
May it have to see with the model and the firmware version of the Aruba IAP?
For this type of integration, i could open a case with the Cisco TAC, or because it is with another manufacturer Cisco does not support?

Thank you