ISE as External Webauthentication server

[ysethu]

Hi,

   I have a scenario where I wanted to configure ISE as acting as external webauth server for my wireless lan controller. As of now I am able to configure wireless controller  with portal url present in ISE but still I am facing redirection issues.  Will explain further on this if any understanding is required. Any help on this would be really great .I am using ISE version 2.1.

If any configuration guide for the same will also be helpful.

Thanks,

S.Yasodhapriya

[Jason Kunst]

Please explain why you would do this and complicate and make your experience worse?

It seems like you’re trying to do LWA pointing to ise?

[ysethu]

Hi Jason,

      One of our customer has deployed this way and we wanted to verify the same scenario for the same.Hence , looking for a solution.I followed the below configuration guide for section "Configure the External ISE as the Webauth URL Globally".

But I do face some redirection issues hence looking help.

https://www.cisco.com/c/en_intl/support/docs/security/identity-services-engine/116217-configure-ISE-00.html#anc10

[paul · Accepted solution]

What is their justification for using this setup?  Just because that is how they currently have it setup doesn't mean it is necessary.  As the link you posted says "This document describes the configuration of LWA. However, Cisco recommends that you use Centralized Web Authentication (CWA) with the ISE whenever possible. "  I have done over 75 ISE installs and have never had a use case or reason to use LWA.