cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

897
Views
1
Helpful
18
Replies
Beginner

ISE 2.2 Wireless Setup

I have upgraded to ISE 2.2 and I'd like to use the Wireless Setup feature, but it's not showing in my tool bar.

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

Re: ISE 2.2 Wireless Setup

Please reference the admin guide

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_0100100.html

If you upgrade ISE from a previous version, the Wireless Setup menu does not appear. This is because Wireless Setup is only supported for new ISE installations.

If you still want to run it you can manually enable it via CLI

In the CLI, run application configure ise and choose the option to enable

https://communities.cisco.com/docs/DOC-71189

View solution in original post

18 REPLIES 18
Highlighted
Cisco Employee

Re: ISE 2.2 Wireless Setup

Please reference the admin guide

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_0100100.html

If you upgrade ISE from a previous version, the Wireless Setup menu does not appear. This is because Wireless Setup is only supported for new ISE installations.

If you still want to run it you can manually enable it via CLI

In the CLI, run application configure ise and choose the option to enable

https://communities.cisco.com/docs/DOC-71189

View solution in original post

Highlighted
Beginner

Re: ISE 2.2 Wireless Setup

Thank you Jason. I read in the document that it's recommended to use the Wireless Setup in a standalone environment.

Will I mess things up if I try it in my distributed environment?

It's not yet in production by the way. My goal is to get a basic configuration up and running and fine tune it later on.

Thanks

Highlighted
Cisco Employee

Re: ISE 2.2 Wireless Setup

It's fine just be aware that if you wanted to add a specific psn to your WLC you made to do it manually

The tool will only setup the first 2 psns to use

Highlighted
Beginner

Re: ISE 2.2 Wireless Setup

Hey Jason, quick question to make sure I'm doing this correctly.

My system has an administrator node, a backup and 2 PSNs setup in failover mode.

Now in order to run the wireless setup tool, I understand that I need to wipe the previous configuration using the "application reset-config ise" command.

Now when I tried that I got a message that I should deregister the nodes prior to running the command.

So, If I understand correctly I should follow the steps below:

  1. Deregister all nodes
  2. Run the "application reset-config ise" command on the admin node
  3. Register all the nodes and setup the failover again.
  4. Run the wireless setup tool.

Am I missing anything?

cheers

Highlighted
Cisco Employee

Re: ISE 2.2 Wireless Setup

you don't need to reset ise config, you simply need to enable the wifi setup tool

ise-1/admin# application configure ise

Selection ISE configuration option

[1]Reset M&T Session Database

[2]Rebuild M&T Unusable Indexes

[3]Purge M&T Operational Data

.

.

[17]Enable/Disable Wifi Setup

[18]Reset Config Wifi Setup

[19]Exit

Highlighted
Beginner

Re: ISE 2.2 Wireless Setup

Ah, excellent.

I'll try that.

Thanks a lot.

P.S: Your videos on YouTube are very helpful

Highlighted
Cisco Employee

Re: ISE 2.2 Wireless Setup

Thank you!

Highlighted
Beginner

Re: ISE 2.2 Wireless Setup

Ok, I tried that.

When I went to option [17] it said that the wifi is currently running.

I tried to disable it, and then re-enabled it again.

Logged off the gui and logged back in and it was still not available.

I want to try to reset the ise config and start over with a clean slate.

Are the steps I listed in the previous post correct?

Highlighted
Cisco Employee

Re: ISE 2.2 Wireless Setup

yes

Highlighted
Beginner

Re: ISE 2.2 Wireless Setup

Hey Jason, I'm in the process of creating a sponsored guest portal.

I have joined the domain and now selecting a sponsor group.

Can you please confirm if the sponsor group selected is the group that will be allowed to create accounts for guest users?

Highlighted
Cisco Employee

Re: ISE 2.2 Wireless Setup

The AD group is mapped to a sponsor group that is allowed to use the sponsor portal

The sponsor group also controls what the sponsor can do with the sponsor portal

Highlighted
Beginner

Re: ISE 2.2 Wireless Setup

Hey Jason, something weird is happening with the tool, or perhaps I'm doing something wrong.

I reached step 3 in the wireless setup where I selected the sponsor group from my AD.

When I click commit, I get a message:" no Active Directory by the name of domain.com found"

See here: https://www.screencast.com/t/chCC3CBQ2rK

I can confirm that all my nodes have successfully joined the domain: https://www.screencast.com/t/6S2fmKrV

Any ideas on what could be causing this issue?

Thanks

Highlighted
Cisco Employee

Re: ISE 2.2 Wireless Setup

please read this in its entirety

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_0100100.html

If you already defined Active Directory in ISE, and you plan to use this AD for Wireless Setup, then:

  • The join name and domain name must be the same. If the names are not the same, then make them the same in ISE before using that AD in Wireless Setup.
Highlighted
Beginner

Re: ISE 2.2 Wireless Setup

You nailed it.

Thanks very much for your patience.

Cheers