CWA with guest controller?

[SHANNON WYATT]

Existing environment has a dedicated guest controller. Principal would like to retain the guest controller in the DMZ and open ports for CWA to ISE inside the firewall. The question is on configuration of the wireless LAN. Should the foreign controller be configured for MAC auth? Obviously the anchor would need to be but not sure about the foreign.

[Venkatesh Attuluri]

When you have anchor/foreign, the web auth traffic always go to the anchor, so  with CWA, the traffic from the anchor to the ISE will need to be permitted . go through the following link this may of help

https://supportforums.cisco.com/docs/DOC-26442

[SHANNON WYATT]

Gotcha. That doc doesn't answer my question, but some of the questions in the doc do talk about anchor/foreign setup. I will tests it later.