Guest access with Aerohive

[martucci]

Hello, I am trying to setup Aerohive to work with ISE.

All seems working fine, client is redirected, client is logging in, successful, but then I see some issues, when while ISE is actually sending back a permit access to the user and I see the proper authZ rule hit for the user, the lcient is actually still redirected to the login portal.

I am thinking that aerohive is not properly removing the redirect, eve if ISE is sending down a permit access.

I was wondering if anyone had any experience with it.

We find it quite difficult on the Aerohive to properly debug and understand why the redirect is not removed (or simply to cofirm this behaviour).

Thanks

Frnacesca

[hslai]

Aerohive is not listed in our third-party support so nothing from our product teams.

[martucci]

Thanks Hsing,

I know it is not an official supported one, but we should support any vendor with CoA and capability to redirect, and Aerohive has.

Can someone please help me debug to see if I am missing anything on the ISE side?

We are trying to get some help on the NAD side as well

Thanks a lot

Francy

==========================================================

Francesca Martucci – CISSP # 481718

CONSULTING SYSTEMS ENGINEER.SECURITY SALES

UKI

martucci@cisco.com<mailto:martucci@cisco.com>

Phone: +44 20 8824 6984

Mobile: +44 77 47476000

==========================================================

[hslai · Accepted solution]

This discussion has been taken offline. I will send you the info.

[Sebastian Helmer]

Is there an Option to get those Information as well?

would be nice..

[eiwanski]

hslai,

Could you please also send me any information on Aerohive with ISE?

Thank you

[hslai]

This is an old thread. IIRC I took it offline because of no official support.

I would suggest reading Craig's comprehensive response in ISE and Aerohive for BYOB use case or start your own thread if you still have questions.

[jsaarikko1]

HSLAI,

    Can you please unicast me that information as well? Or can you post that information ad It would be extremely helpful...