ISE to support Wireless LWA

[yong khang NG]

Hi forumers'

How Cisco Identity Service Engine (ISE) can work with  WLAN controller 5508 to do the Local Web Authentication, on behalf tje  guest profile is create using Cisco ISE guest management?

As i check Cisco ISE caveat wireless only support on LWA, and LWA not supported on Authorization's VLAN assignment.

Can  please guide me what i need to concern abou the ISE authentication and  authorization policy on behalf on Wireless LWA with use of ISE guest  management case?

Many thanks

Noel

[Tarik Admani]

The reason that this isnt supported is because the client needs an ip address to do web authentication which is layer 3 authentication. Once the client has received an ip address there is nothing we can do to assign the client a different vlan since it already has an ip address.

Thanks,

Tarik Admani

[Venkatesh Attuluri]

WLC 7.1.x only supports LWA, not CWA. WLC  7.2.x, which is compatible with the 2500, 5500 series and WiSM 2 WLCs supports  either CWA or LWA.

Non-802.1X WLANs (including those using LWA) do not  support MAB, CoA, Posture, Profiling; VLAN assignment is possible with MAC  Filtering, but not LWA