Cisco ISE - Guest Network

[David Boos]

I'm attempting to setup our guest network with ISE and I am having problems getting the web agent to show up.  I've attached the rules I'm using and the authentication information.

[Tarik Admani]

David,

Try adding a condition where the posturestatus not equals to complaint. That should be under the Session dictionary.

thanks,

Tarik Admani
*Please rate helpful posts*

[David Boos]

This is the result now, not getting a web agent on authentication.  Not sure why it says the posture status is not applicable.

Policy

Live Authorization

[Tarik Admani]

How are you performing the web authentication (are you using local web authentication or central web authentication)?

Also the following which is documented in the latest WLC 7.2.110 release notes:

"RADIUS NAC with Layer3 web authentication security (local web authentication) is not supported."

Thanks,

Tarik Admani
*Please rate helpful posts*

[Venkatesh Attuluri]

FYI

WLC 7.1.x only supports LWA, not CWA.  WLC 7.2.x, which is compatible with the 2500, 5500 series and WiSM 2 WLCs  supports either CWA or LWA.  WLC 7.1.x Non-802.1X WLANs (including those using  LWA) do not support MAB, CoA, Posture, Profiling; WLC 7.2 MR1 Non-802.1X WLAN  supports CoA and profiling. VLAN assignment is possible with MAC Filtering, but  not LWA