cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

428
Views
5
Helpful
2
Replies
ibrkic001
Beginner

CISO ISE and HREAP on WLC

I need to configure ISE like RADIUS server  on wireless controller with software version 7.0.252.0. On that WLC we have enabled HREAP . When i try to change NAC state to RADIUS NAC, there is notification that i must disable HREAP. But that we need on that WLC and Access points, i did not try until end because is in production.

On new versions of WLC instead HREAP is flex connect.

 

Is it possible to realize this with this version of WLC software?

 

best regards

 

 
 
 

 

1 ACCEPTED SOLUTION

Accepted Solutions
Arne Bier
VIP Advisor

Hi

 

Have you tried with NAC "off/none" ? I have to admit I have not found a good explanation yet of what that parameter actually does. In newer WLC (AireOS) versions, Cisco added ISE NAC too. On one occasion I had to disable the NAC on the WLAN because I was doing MAC Filtering and 802.1X on the same SSID - it seems that disabling this feature was necessary - and of course I was using the ISE RADIUS server for both MAC bypass and 802.1X.

A good explanation of what this feature would probably help.

On 9800 WLC (IOS-XE) we don't have this feature.

View solution in original post

2 REPLIES 2
Arne Bier
VIP Advisor

Hi

 

Have you tried with NAC "off/none" ? I have to admit I have not found a good explanation yet of what that parameter actually does. In newer WLC (AireOS) versions, Cisco added ISE NAC too. On one occasion I had to disable the NAC on the WLAN because I was doing MAC Filtering and 802.1X on the same SSID - it seems that disabling this feature was necessary - and of course I was using the ISE RADIUS server for both MAC bypass and 802.1X.

A good explanation of what this feature would probably help.

On 9800 WLC (IOS-XE) we don't have this feature.

View solution in original post

Hi Arne, 

thanks for suggestion

 

i tried with NAC "none", and that works.

Content for Community-Ad