cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1346
Views
0
Helpful
2
Replies

ISE, guest portal on WLC

Hi,

Currently we have wireless guest login through a guest portal in the WLC. Is it possible to implement ISE and keep the guest portal in the WLC?

Example:

User connects to a SSID with an laptop. That laptop is profiled as not belogning to the company network and is then redirected to the WLC guest portal.

All the guides I find is about having the guest portal in the ISE.

Regards

Philip

1 Accepted Solution

Accepted Solutions

bartbruninx
Level 4
Level 4

Hi Philip,

You can use the ActivatedGuest role (or any other external identity store) and implement radius authentication instead of LWA or CWA, this way you can keep the portal on the controller.

Greetings

View solution in original post

2 Replies 2

bartbruninx
Level 4
Level 4

Hi Philip,

You can use the ActivatedGuest role (or any other external identity store) and implement radius authentication instead of LWA or CWA, this way you can keep the portal on the controller.

Greetings

Venkatesh Attuluri
Cisco Employee
Cisco Employee

You can use LWA for this . he WLC redirects  the HTTP traffic to an internal or external server where the user is prompted to  authenticate. The WLC then fetches the credentials (sent back via an HTTP GET  request in the case of external server) and makes a RADIUS authentication. In  the case of a guest user, an external server (such as Identity Service Engine  (ISE) or NAC Guest Server (NGS)) is required as the portal provides features  such as device registering and self-provisioning.

Refer to the following link for  configuration  example

http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080bead09.shtml