Cisco ISE with Flexconnect Access Points

[Maurice Ball]

Is it possible to use Cisco ISE with a virtual WLC running the AireOS with the following features?

802.1x authentication 

Guest Services with Central Web Authentication

[balaji.bandi]

here is the example Guide :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116087-configure-cwa-wlc-ise-00.html

[Maurice Ball]

Thanks for the information. I have already tried to follow the document you listed below with no success. Is it possible to setup Flexconnect AP to use Central Web Authentication and the access points are configured for local switching?

[thomas · Accepted solution]

Yes, ISE works with virtual WLCs - it is validated in the ISE Compatibility Guide > Validated Cisco Wireless LAN Controllers.

This is how we do all of our ISE demos in Cisco's dCloud. Since we cannot assume the local [PoE] switch behind the AP  has all of the correct VLANs configured, we disable FlexConnect Local Switching and backhaul the traffic. Your mileage may vary. Consult your wireless controller guide/architecture for the correct design.

If you are configuring this in your lab, consider using the ISE Wireless Setup Wizard to quickly configure this for you:

It should not be used for production networks since it does not consider any existing production settings when making configuration changes. This is why the menu is labeled as BETA.

Here are the ISE + Cisco Wireless configuration resources: http://cs.co/is-guides > Cisco Wireless

If you have further questions about troubleshooting this, please including configuration and error details .

[Maurice Ball]

Ok great. Thanks for the information.