Flexconnect with ISE Issue

[Fredy Jonathan Tafolla Salgado]

Hi Everyone,

I have a issue trying to deploy Flexconnect in WLC integrated with ISE.

In the scenario, the users are working properly through the wireless network and they are able to authenticate, the NAC agent is invoked and everyone can get authorization access to the network using Radius NAC as NAC State. But when we tick the feature ""FlexConnect Local Switching"" and change the users cannot get IP Address from DHCP and the client status in WLC show POSTURE_REQD.

We can see this in ISE that the user is able to authenticate but never get authorization and the NAC state is not showing in the PC.

Any idea about this issue?? This is maybe any limitation or configuration error?

Regards

[Karsten Iwen]

There are some documents for this type of deployment:

http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080c090eb.shtml

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080bcb905.shtml#anc13

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Fredy Jonathan Tafolla Salgado]

Hi Iwen,

I tried to deploy flexconnect based on that configuration guides. But still it not work. The clientes never get IP Address by DHCP, and on ISE i can see that the stop in posture compliant process. The NAC agent never is show it.

Some idea about this issue?

Regards