configuring ise

[kennedymacharia]

hi guys,

I am deploying ise 1.2.1.198 with wlc 5508 for guest web authentication but  redirection is not occuring and also clients are not getting dhcp.

I have not configured any switch for this deployment. (do I have to? )

[Saurav Lodh]

can you share the authorization profile and policies? Take the configuration help from below

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

[Venkatesh Attuluri]

check ACL on WLC "ACL-WEBAUTH_REDIRECT" configured for redirection

[Charlie Moreton]

Yes, you have to.

Ensure that you configure the switchport connected to the WLC as a trunk:

interface GigabitEthernet0/23
 description wlc
 switchport trunk encapsulation dot1q
 switchport mode trunk

Also ensure that the VLANs used have the ip helper address pointing to the DHCP Server:

interface Vlan50
 description GUEST
 ip address 10.1.50.1 255.255.255.0
 ip helper-address 10.1.100.10
 

Whichever ACLs you reference on your ISE must exist on your WLC:

These are the first steps to proper redirection.

Be sure to check the Admin Guide for further guidance:

http://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_0100001.html

Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.

Charles Moreton