Cisco ISE manually onboard device

[VivianWu]

Hi All,

I am looking for some guide on how to allow mobile phone users to manually register their devices, Our NAD has very limited functions, doesn't support url-redirect, it only simply relays wifi auentication requests to ISE. We require the mobile phone users access my device portal and manually register their device, install the cert and then allow access. 

[Arne Bier]

If you're planning to use ISE BYOD functionality, then you'll have no other choice than to redirect users to a portal to authenticate themselves. It's been a while since I used ISE BYOD, and if I recall, there was an app that Android users must download from the Google Play store.  So you need to know what clients you're looking to support (iOS, Android, etc.)

The definitive BYOD Guide is here

What NAD are you using?

[VivianWu]

Our NAD is a SDWAN device. 

[ahollifield]

SDWAN?  SDWAN doing wireless?  What SDWAN?  What is the use-case to allow unknown/unmanaged devices onto the protected network?