Testing BYOD on Cisco ISe 1.3
Scenario:-
- ISE 1.3, WLC 7.4
- ISE identity certificate is signed-by Microsoft AD, used for all portals.
- for Client Provisioning ISE will use internal CA.
- Wireless Clients IPad & Windows7
- Using Single SSID WPA2-Enterprise
- Client Provisioning ACL gives client unrestricted access to ISE
Issues:-
iPad
- client connecting to SSID are prompted for dot1x credentials (were entered) and for certifacte (was trusted), and connect successfully
- Getting redirected successfully to BYOD portal, start the Onboarding, enter device info.
- Install profile (AD-CA-Cert) => Install
- Warning => Install
- Pop-up => Install
- Profile Installed => Done
- Install Profile (Profile Server) => Install
- warning => Install
- Pop-up => Install
- Pop-up (Profile Installation failed " The server certificate for https://ise-demo.local:8905 is invalid"
Windows:-
similar to iPad, but its required to download and install the Setup Assistant.
Installed successfully but fails to download profile. The spwProfileLog file is attached.
