CISO ISE and HREAP on WLC

[ibrkic001]

I need to configure ISE like RADIUS server  on wireless controller with software version 7.0.252.0. On that WLC we have enabled HREAP . When i try to change NAC state to RADIUS NAC, there is notification that i must disable HREAP. But that we need on that WLC and Access points, i did not try until end because is in production.

On new versions of WLC instead HREAP is flex connect.

Is it possible to realize this with this version of WLC software?

best regards

[Arne Bier · Accepted solution]

Hi

Have you tried with NAC "off/none" ? I have to admit I have not found a good explanation yet of what that parameter actually does. In newer WLC (AireOS) versions, Cisco added ISE NAC too. On one occasion I had to disable the NAC on the WLAN because I was doing MAC Filtering and 802.1X on the same SSID - it seems that disabling this feature was necessary - and of course I was using the ISE RADIUS server for both MAC bypass and 802.1X.

A good explanation of what this feature would probably help.

On 9800 WLC (IOS-XE) we don't have this feature.

[ibrkic001]

Hi Arne, 

thanks for suggestion

i tried with NAC "none", and that works.