Does ISE2.0 support WPA2-PSK?

[justinringline]

Dear Sir,

MS AD Server <--> ISE2.0 <---> CT5508 <--> CAP3702i

I have a AD group: StaffComputer, and a SSID: Guest

Can I configure WPA2-PSK in the ISE2.0 for SSID: Guest, and exclude the StaffComputer?

In other words, staff's computers can not access network by the SSID: Guest.

Thanks a lot.

[jan.nielsen · Accepted solution]

No, since WPA2-PSK is only based on a pre-shared key between the client and the WLC, the ISE is not involved at all, and can't control anything.

[Christos Stefaneskou]

Hi,

If "Staff Computers" are Windows and joined to a Domain Controller, you can can create a GPO and blacklist the Guest ssid, so corporate devices will not be able to connect to this ssid.

http://www.grouppolicy.biz/2010/03/how-to-use-group-policy-to-blackwhite-list-wireless-networks-in-vista-windows-7/

Best regards,

Christos