ISE Authorization Profile to grant limited access to Wireless Guests

[Mike Masalla]

Hi,

I am after building sponsored guest access for wireless guests in ISE running on software release 1.3.

I wonder if there is a way to keep the guest on the initial vlan after successful authentication and grant him Internet-Only access. I mean to say, I do not want to assign him to different vlan and restrict his access by an ACL applied on Layer-3 Vlan Interface. 

I could have done it by dACL, if the guest is connecting through the wired network, but because Wireless Controller do not accepts dACLs, I am not aware of any way to do it without changing vlan   

Appreciate your idea.

Mike

[jan.nielsen · Accepted solution]

Sure, just create the ACL you wan't to use for your guests directly on your WLC, and then reference the name of that ACL in your authorization profile in the option called "Airespace ACL Name".

[Mike Masalla]

Thanks Jan. Appreciate your pictorial answer.

[Venkatesh Attuluri]