Can ISE change a SSID name alias broadcast?

[claudio.laurentino1]

Cisco WLC 9800 is configured to broadcast a SSID alias as "Original_SSID", the WLC is configured with a ISE controller IP, but in the client computer we see the available SSID alias as "Other_SSID".

We do not access to the ISE configuration, can the ISE changing the SSID alias?

Is there a command in WLC to show that the ISE is changing the SSID alias?

Thanks.

[Arne Bier]

Hi Claudio,

The true SSID (i.e. the one that the AP is broadcasting) will be sent to ISE in a RADIUS request in the Called-Station-ID attribute. If you have an ISE Policy that needs to make a decision based on the SSID, then that is the RADIUS attribute to look at (and use in your condition logic).  By default, ISE does not change anything to do with SSIDs. When ISE responds with a successful Access-Accept back to the WLC, there are some optional attributes that we can use to make dynamic AAA. e.g. ISE can return things like ACLs, VLAN and Session-Timeouts. Have a look at the exact ISE RADIUS Authorization Profile to see all the attributes you are returning. I was not aware that there was one to change the SSID that is being broadcast - that doesn't make sense - that would be a catastrophe, if we could make up SSIDs on the fly - LOL.