Guest access with CWA on ISE 1.3

[dani210867]

Hi ,we implemented CWA for wireless guest access using ISE. However we have an issue, the redirect URL is a name, not an IP address, and the guest dhcp scope use public DNS servers, so CWA doesn't work unless we set the company DNS servers.

Is there any way to configure ISE to send the ip address instead the name for redirection in CWA?

Regards

[Tim Steele · Accepted solution]

Yes, you can set a static PSN to be used for the redirect in the authz  profile:

But, you'll end up with a cert error for the guest user experience unless you have the IPs in the SAN fields of the ISE certificate.  I suppose you are adverse to using internal DNS so the guest can properly resolve the PSN hostnames? 

Tim