ISE 1.1 Corporate Laptop authentication like Guest on WIFI network

[silvere81]

Hi all,

I have all Laptop on Microsoft Active Directory(AD) and Wifi access point 4410N. The problem is that we don't have a WLC and when coporate Laptop is connect, the device is authentified like guest device. The device is redirect to guest portal, and user have to put AD username and password.

How can i do to guet Laptop AD name and avoide guest portal for corporate users on Wifi network.

Best regards.

[Tarik Admani]

Hi,

Do you have a separate ssid for your ad users. It seems as if you are doing central webauth and not dot1x.

Is this the case?

Thanks

[silvere81]

Hi ,

We are using the same SSID for AD users and guest users and dot1x is configure on the switch port.

Best regards.

[Tarik Admani]

Can you check your authorization policies and make sure the ad users policy is above the guest policy. It uses a top to bottom logic and a first match xondition.

Also can you check the report and check the authentication method attribute?

Thanks