How guest portal will work if both ISE servers were down.

[siddhesh.parab@orange.com1]

Hello All

we have two ISE servers and if bothes goes down then how my guest flow will work ??

Need your views.

Thanks in advance.

[Colby LeMaire]

Since the guest portal is hosted on the ISE servers, your guest users would not be able to login/register.  When the users attempt to connect to the guest SSID, the WLC will try to authenticate them to ISE.  If both servers are down, then the WLC would not be able to authenticate the user and they would not be able to get any access at all.

[siddhesh.parab@orange.com1]

Hello Colby,

Thanks for your response.

So is there any workaround to access Guest portal even if both ISE nodes are down ??

[Greg Gibbs]

Most wireless authentication functions will break if the WLC loses connectivity to all RADIUS servers. While there are some options for falling back to local authentication, your case would require the WLC to fallback from using Central Web Auth (CWA) to using Local Web Auth (LWA). I'm not sure this is possible, but you might try asking the question on the Wireless - Mobility community page as this is not an ISE question.

Ideally, you would build high-availability for all components into your architecture so there is no single point of failure. Guest is typically a 'best-effort' service, so outages are not often high-priority.

Cheers,

Greg