cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

702
Views
0
Helpful
5
Replies
Highlighted
Beginner

Cisco ISE || Wireless User Tracking

Hello,

 

We currently have 500+ APs in one of our client location connected to WLC.

 

I would like to know how we can configure ISE to locate the users connected to specific Wireless AP in WLC environment.

 

As for the switches, we can locate the user connected to specific switch on specific port. Can we configure in ISE where we can track user connected to specific AP.

 

Currently if we configure ISE with WLC, the location for the user shows as WLC.

 

Require your suggestions.

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

In the WLC (RADIUS Authentication and Accounting Servers), you can configure the string that will be used for the Called-Station-ID. You can specify a string that includes the AP name or MAC address. You will see that value in the detailed logs and can use string matches in your AuthC or AuthZ Policies if required.

Screen Shot 2020-08-24 at 12.25.06 pm.png

View solution in original post

5 REPLIES 5
Highlighted
Hall of Fame Community Legend

ISE will only tell you what AP the MAC address is connected to.
If you want per-room/per-square-metre location tracking then you'll need to reach out to your Cisco AM/SE and ask about DNA Spaces solution.
Highlighted

Hello Leo,

 

How can we check in ISE which AP the MAC address is connected too?

 

As i can see in ISE, once we integrated WLC we can see all the mac-address connected to WLC instead of AP?

 

 

Highlighted

In the WLC (RADIUS Authentication and Accounting Servers), you can configure the string that will be used for the Called-Station-ID. You can specify a string that includes the AP name or MAC address. You will see that value in the detailed logs and can use string matches in your AuthC or AuthZ Policies if required.

Screen Shot 2020-08-24 at 12.25.06 pm.png

View solution in original post

Highlighted

Hi Greg,

 

Thanks, this is what i was looking for.

 

Cheers..!!

 

Highlighted
Hall of Fame Community Legend


@Kamil Sheriff wrote:

How can we check in ISE which AP the MAC address is connected too?


  1. Operations > RADIUS > Live Logs.  
  2. Enter the MAC address into the Endpoint ID filter. 
  3. Click on the Authentication Detail Report and a new browser tab/windows appears. 
  4. Depends how it is configured in the WLC, the name of the AP should appear in the SSID line &/or the Calling-Station-ID line (under Other Attributes).
Content for Community-Ad