ISE 2.3 as Radius Server with IP-Pool oder DHCP

[knsh2003]

Hi there,

I would like to user ISE as Radius-Server on VMware for our Smartphones! I had tried to figure it out with using DHCP-Service function enabling on ISE, but unfortunately didn#t work perfect. so I would like to you, if anyone can provide/help/support me to configure it correctly.

any useful recommendation or infos R welcome!

this article didn't help actually : Configure Third-Party NAD Redirection on ISE 2.1 - Cisco

great time,

cheers, Keyvan

[bravojared · Accepted solution]

This is not a use case for the DHCP Server in ISE.

The DHCP/DNS server functionality in ISE is to assign IP Addresses and take all DNS requests from clients (Except those domains excluded) and redirect them to ISE server.  The purpose/goal for this is to intercept traffic when the NAD is not aware of how to redirect.  So, the only domains that would NOT be redirected to ISE require:

1. Specified in External Domain List to respond with real IP address.

2. External DNS Servers are populated.

Since you can't put every domain that you would want to reach their real addresses in the box for #1, this is not a supported use case for DHCP/DNS Server in ISE for general purpose DHCP/DNS. 

Suggest you use something else for DHCP scope (Controller, switch, etc) and point to a valid DNS server.