cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

214
Views
0
Helpful
3
Replies

How guest portal will work if both ISE servers were down.

Hello All

 

we have two ISE servers and if bothes goes down then how my guest flow will work ??

 

Need your views.

 

Thanks in advance.

 

 

3 REPLIES 3
Highlighted
Rising star

Re: How guest portal will work if both ISE servers were down.

Since the guest portal is hosted on the ISE servers, your guest users would not be able to login/register.  When the users attempt to connect to the guest SSID, the WLC will try to authenticate them to ISE.  If both servers are down, then the WLC would not be able to authenticate the user and they would not be able to get any access at all.

Highlighted

Re: How guest portal will work if both ISE servers were down.

Hello Colby,

 

Thanks for your response.

So is there any workaround to access Guest portal even if both ISE nodes are down ??

Highlighted
Cisco Employee

Re: How guest portal will work if both ISE servers were down.

Most wireless authentication functions will break if the WLC loses connectivity to all RADIUS servers. While there are some options for falling back to local authentication, your case would require the WLC to fallback from using Central Web Auth (CWA) to using Local Web Auth (LWA). I'm not sure this is possible, but you might try asking the question on the Wireless - Mobility community page as this is not an ISE question.

Ideally, you would build high-availability for all components into your architecture so there is no single point of failure. Guest is typically a 'best-effort' service, so outages are not often high-priority.

 

Cheers,

Greg