Secure Access Wizard won't talk to my vWLC

[Jim Blake]

I watched Jason Kunst's video on You Tube, and it inspired me to try SAW for myself. I loaded up my VM host with vWLC, version 8.8.120.0, and got ISE version 2.3 (ISE-2.3.0.298-virtual-eval) and gave it a shot:

I'm running a clean install of vWLC, and a clean install of ISE. I joined the ISE with AD, running off  Win2K12R2. All the diagnostics show that ISE was properly joined with AD, so then ensured that the WLC was supporting just 1 SSID, that was configured at install time, and ran up SAW. It all looked good, it asked for the WLC IP address, the user name and password and the shared secret. This is a clean new install, so the WLC has no shared secret yet, so gave it one to use, and hit the button. Unfortunately, all I got back was  "Failed to Configure WLC: WlcConnectionSetupFailed".

OK, so I've done something wrong, so looked in the ISE logs and the WLC logs....nothing. ISE can ping WLC, and vice versa. So I google about a bit, and find some notices incriminating ISE 2.3. Didn't look too serious, but I thought I'd try ISE 2.4 to be sure, and got hold of ISE-2.4.0.357-6.5OVA-Eval and loaded that up.

However, that made no change: I still got "Failed to Configure WLC: WlcConnectionSetupFailed".

Is this maybe down to doing this on a low-powered Lab VMware 6.0 host? or are there other things I should look at.....and why is there NOTHING in the logs at either end???

Jason, give me some hints, you make it seem so simple in your excellent video :)

Thanks guys for any suggestions

Jim

[Jim Blake]

Further info that may help: I think I've accommodated all the requirements and caveats in https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_010.html and my VM Host is giving the ISE 16Gb and 8 cores of a Xeon, so I think I'm OK for resources

[Jason Kunst · Accepted solution]

PLease check the FAQ for support. i am working on getting newer wireless code in ISE 2.6 patch 3 due later this year. Right now it works with 8.3

https://community.cisco.com/t5/security-documents/cisco-ise-secure-access-wizard-saw-guest-byod-and-secure-access/ta-p/3636602#toc-hId-46800983