cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

397
Views
10
Helpful
4
Replies
Highlighted
Beginner

Cisco ISE with Flexconnect Access Points

Is it possible to use Cisco ISE with a virtual WLC running the AireOS with the following features?

802.1x authentication 

Guest Services with Central Web Authentication

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Re: Cisco ISE with Flexconnect Access Points

Yes, ISE works with virtual WLCs - it is validated in the ISE Compatibility Guide > Validated Cisco Wireless LAN Controllers.

This is how we do all of our ISE demos in Cisco's dCloud. Since we cannot assume the local [PoE] switch behind the AP  has all of the correct VLANs configured, we disable FlexConnect Local Switching and backhaul the traffic. Your mileage may vary. Consult your wireless controller guide/architecture for the correct design.

image.png

If you are configuring this in your lab, consider using the ISE Wireless Setup Wizard to quickly configure this for you:

image.png

It should not be used for production networks since it does not consider any existing production settings when making configuration changes. This is why the menu is labeled as BETA.

Here are the ISE + Cisco Wireless configuration resources: http://cs.co/is-guides > Cisco Wireless

If you have further questions about troubleshooting this, please including configuration and error details .

View solution in original post

4 REPLIES 4
Highlighted
VIP Mentor

Re: Cisco ISE with Flexconnect Access Points

Highlighted
Beginner

Re: Cisco ISE with Flexconnect Access Points

Thanks for the information. I have already tried to follow the document you listed below with no success. Is it possible to setup Flexconnect AP to use Central Web Authentication and the access points are configured for local switching?

Highlighted
Cisco Employee

Re: Cisco ISE with Flexconnect Access Points

Yes, ISE works with virtual WLCs - it is validated in the ISE Compatibility Guide > Validated Cisco Wireless LAN Controllers.

This is how we do all of our ISE demos in Cisco's dCloud. Since we cannot assume the local [PoE] switch behind the AP  has all of the correct VLANs configured, we disable FlexConnect Local Switching and backhaul the traffic. Your mileage may vary. Consult your wireless controller guide/architecture for the correct design.

image.png

If you are configuring this in your lab, consider using the ISE Wireless Setup Wizard to quickly configure this for you:

image.png

It should not be used for production networks since it does not consider any existing production settings when making configuration changes. This is why the menu is labeled as BETA.

Here are the ISE + Cisco Wireless configuration resources: http://cs.co/is-guides > Cisco Wireless

If you have further questions about troubleshooting this, please including configuration and error details .

View solution in original post

Highlighted
Beginner

Re: Cisco ISE with Flexconnect Access Points

Ok great. Thanks for the information.