ISE Guest sponsored URL

[Amr Ali Mohamed]

hello,

when i configure the sponsored portal and specify the URL for this portal, which IP will I put for this URL on my DNS to reach it ??

[MHM Cisco World]

the IP of PSN used as CN of cert.

MHM

[Amr Ali Mohamed]

thanks For support , so as the below screenshot I will configure A record for this URL to IP of PSN 

[MHM Cisco World]

PSN IP -> DNS -> fqdn of url use in redirect AND fqdn in CN in cert you use for portal.

MHM 

[Rob Ingram]

@Amr Ali Mohamed

Update your DNS so that the FQDN of the new URL resolves to a valid Policy Services Node (PSN) IP address, if you have multiple PSNs, either use DNS round robin or point to a load balancer virtual IP address of the PSNs.

You will need to configure the portal certificate on the PSNs with sponsor portal FQDN, you could use a wildcard certificate or configure a SAN attribute with the FQDN, otherwise you will have certificate errors.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ise_admin_3_1/b_ISE_admin_31_guest.html