ISE Central webauth and vWLC 7.4

[jan.nielsen]

Hi Everybody,

I am wondering if anyone has gotten this scenario to work, Cisco ISE Guest Portal via CWA redirect on an AP connected to a Virtual WLC running 7.4. As vWLC can only run flexconnect, and no centrally switched vlans are supported, how would this scenario be possible, if at all, the AP would have to do the redirect instead of the controller ?

[Tarik Admani · Accepted solution]

Jan,

This will work fine, when the client is in the WEBAUTH-REQD, Supplicant provisioning, or Posture_Reqd state the traffic is centrally switched. Once the client is in the RUN state then the control message is sent to the AP to place the client in flexconnect mode.

Thanks,

Tarik Admani
*Please rate helpful posts*

[vikasyad]

Yes, I agree with Tarik

also do review the below link which might be helpful:

http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_41_guest_services.pdf

http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_40_webauthentication_dg.pdf

[jan.nielsen]

I found out i was having some weird radius problems on my ESX server, between my vWLC and ISE, once i fixed that it worked perfectly. Thanks.