Cisco ISE || Wireless User Tracking

[Kamil Sheriff]

Hello,

We currently have 500+ APs in one of our client location connected to WLC.

I would like to know how we can configure ISE to locate the users connected to specific Wireless AP in WLC environment.

As for the switches, we can locate the user connected to specific switch on specific port. Can we configure in ISE where we can track user connected to specific AP.

Currently if we configure ISE with WLC, the location for the user shows as WLC.

Require your suggestions.

[Leo Laohoo]

ISE will only tell you what AP the MAC address is connected to.
If you want per-room/per-square-metre location tracking then you'll need to reach out to your Cisco AM/SE and ask about DNA Spaces solution.

[Kamil Sheriff]

Hello Leo,

How can we check in ISE which AP the MAC address is connected too?

As i can see in ISE, once we integrated WLC we can see all the mac-address connected to WLC instead of AP?

[Greg Gibbs · Accepted solution]

In the WLC (RADIUS Authentication and Accounting Servers), you can configure the string that will be used for the Called-Station-ID. You can specify a string that includes the AP name or MAC address. You will see that value in the detailed logs and can use string matches in your AuthC or AuthZ Policies if required.

[Kamil Sheriff]

Hi Greg,

Thanks, this is what i was looking for.

Cheers..!!

[Leo Laohoo]

---

@Kamil Sheriff wrote:

How can we check in ISE which AP the MAC address is connected too?

---

1. Operations > RADIUS > Live Logs.  
2. Enter the MAC address into the Endpoint ID filter. 
3. Click on the Authentication Detail Report and a new browser tab/windows appears. 
4. Depends how it is configured in the WLC, the name of the AP should appear in the SSID line &/or the Calling-Station-ID line (under Other Attributes).