There a login problem with ISE with Wifi in our organization .We are using Cisco WLC and integrated with ISE. The issue is any ssid can access in any Active Directory Group Users and also Active Directory integrated properly in ISE. What is the reason and how to solve.
The only screen shot we need to see is your Policy Set that you have configured for each SSID. You should have specific policy sets configured for each SSID and the authorization section should control exactly who can connect to that SSID. My guess is you are using the Cisco default policy set (which should be the first thing you disable) that allows everything on.
If your question is about how you can limit the rules to one specific SSID so that people logging into other SSIDs do not hit this rule, you can add an attribute to the current condition to check the RADIUS:Called-Station-Id contains <SSID name> . In the WLC make sure you set the called station ID attribute being sent is AP-Mac-Address:SSID under the RADIUS server authentication settings. If you need detailed instructions, let me know.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
