ISE Captive Portal & redundancy

[barney.pause]

I have a guest SSID configured in my WLC. I also have 2 ISE appliances (Primary/Secondary) that I use to do the web auth on my guest SSID.

In the config of my SSID (Security / Layer 3 / Web Policy), I selected "Web Auth Type: External" and I had to enter the URL of my ISE server. I used the primary ISE but if the primary fails, I have to manually change that URL to the secondary for web auth to continue to work. How can I automate this? Is there a way to configure a virtual IP address (like NAC CAS) for my 2 ISE?

Thanks

[Tarik Admani · Accepted solution]

The best way around this is to use the central web authentication feature. So that the redirect requests are sent from the ISE node that is available and sends the av-pair to redirect the user.

Have you considered this option?

thanks,

Tarik Admani
*Please rate helpful posts*