10-16-2017 06:32 AM
Hi all:
One customer wants to have an external WEB Server as Guest Portal.
I mean, customer wants to customise a web server. Then, the ISE will point to this server in order to show the Captive Portal.
IS it supported?
How to achieve that? ISE Version? WLC Version?
Thanks in advance.
Jesús Molinero.
Solved! Go to Solution.
10-17-2017 05:46 AM
There is no simple option to say "use this external page for CWA". The CWA flow completes the auth on the PSN, updates specific session and in some cases endpoint attributes, and triggers needed COA. Even with APIs, there is no option to say "user completed auth, user accepted API, etc". You could use API to register endpoint similar to CWA flow and assign Portal User, but auth would be associated with the endpoint (MAB).
10-16-2017 06:41 AM
You can do this by pointing the Authorization Profile to the external web portal. Then, using API, you can place the endpoint MAC Address into the proper Endpoint Identity Group and perform a COA.
10-16-2017 03:01 PM
The problem with using this type of static web server is that this is essentially a dead-end flow from the ISE perspective, hence the suggestion to use the REST API for any control of the session after the redirect.
Unless the session state is changed by some external system (like the REST API), the session would be stuck in the URL redirect state. Any comms required in this state would need to be exempted from redirection in the redirect ACL.
If the customer's main concern is customising the look & feel of the Guest portal, a better option would be to look into using the ISE Portal Builder.
10-17-2017 05:46 AM
There is no simple option to say "use this external page for CWA". The CWA flow completes the auth on the PSN, updates specific session and in some cases endpoint attributes, and triggers needed COA. Even with APIs, there is no option to say "user completed auth, user accepted API, etc". You could use API to register endpoint similar to CWA flow and assign Portal User, but auth would be associated with the endpoint (MAB).
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide