ISE to do wireless network guest access services

[yong khang NG]

Hi Forumers'

I need to know how WLC can support ISE guest management in wireless mode.

Tested and confirm by Cisco SE, Knowing that WLC currently does not support dynamic VLAN authorization for central web authentication. This limitation will be addressed in WLC 7.2 when MAB and CWA support is added to the code. On the other hand, DACLs on the other hand works and we can use that to restrict access of this guest traffic.

So, option now is

1. Can ISE support on WLC LWA guest access provision? This able to view guest user login and show at ISE monitoring.

thanks

Noel

[Nicolas Darchis]

What you don't have at the moment with ISE and WLC is :

-dynamic vlan asisgnement for webauth

-the double-authentication (provoked by Radius CoA) required for central web authentication.

For the rest, all is ok I think. So Local web authentication is supported. Either the webauth is handled by the WLC or you configured it as external on the WLC and the ISE acts as a guest portal.

Guest users will be the guests you create on ISE, monitoring will happen etc ...

[Ravi Singh]

Yes it supports. Please see the below link for configuration

http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080c13287.shtml