cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1239
Views
35
Helpful
2
Replies

Does Guest VLAN need to be reachable to ISE for CWA

Hi, all

 

Just want to understand some basics. 

For guest/contractor access using ISE CWA, does the guest VLAN has to be reachable or routable to ISE? My understanding is as long as the NAD device, that is the authenticator (either AP or WLC), could reach ISE, CWA could be used for guess access using COA.

 

It would be much appreciated if anyone could kindly help and recommend some reference for design for guest/contractor access.

 

Thanks,

2 Accepted Solutions

Accepted Solutions

Marcus Hunold
Level 1
Level 1

Yes, the ISE cwa must be reachable.

Communication is done between the guest endpoint and the ISE cwa portal.

View solution in original post

2 Replies 2

Marcus Hunold
Level 1
Level 1

Yes, the ISE cwa must be reachable.

Communication is done between the guest endpoint and the ISE cwa portal.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: