Cisco ISE redirection ACL mixed with IPs and URL list

[ankaushi]

Hi Team,

Client is using Cisco ISE and a SAML Id Provider to authenticate users to a guest network. The vendor has requested a number of DNS names be allowed for the initial access and some wildcard names.

So we have tried configuring the redirection-acl which is sent back to the WLC with a mixed access-list of IP addresses and DNS names. I would like to know if a ACL configured with a normal 3,4 ACL combine with a URL list works for a redirection-acl or does each IP address associated with the wildcard entries need to be resolved and added as IP’s?

Please suggest.

Regards,

Anshul

[Jason Kunst · Accepted solution]

This is a wireless controller feature but you're correct you can have a general redirect but allow dns based urls without adding ips for those sites