ISE, guest portal on WLC

[Philip Vilhelmsson]

Hi,

Currently we have wireless guest login through a guest portal in the WLC. Is it possible to implement ISE and keep the guest portal in the WLC?

Example:

User connects to a SSID with an laptop. That laptop is profiled as not belogning to the company network and is then redirected to the WLC guest portal.

All the guides I find is about having the guest portal in the ISE.

Regards

Philip

[bartbruninx · Accepted solution]

Hi Philip,

You can use the ActivatedGuest role (or any other external identity store) and implement radius authentication instead of LWA or CWA, this way you can keep the portal on the controller.

Greetings

[Venkatesh Attuluri]

You can use LWA for this . he WLC redirects  the HTTP traffic to an internal or external server where the user is prompted to  authenticate. The WLC then fetches the credentials (sent back via an HTTP GET  request in the case of external server) and makes a RADIUS authentication. In  the case of a guest user, an external server (such as Identity Service Engine  (ISE) or NAC Guest Server (NGS)) is required as the portal provides features  such as device registering and self-provisioning.

Refer to the following link for  configuration  example

http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080bead09.shtml