ISE wireless authorization (Based on AP location)

[Mostafa.Ragab]

Hello All,

I have ISE 2.0 integrated with Cisco AIR 5520 WLC. I want to authorize wireless dot1x users based on the AP location. (Assign a different wireless vlan for each building floor).

How can I do this ? , Or Is there is any attribute on ISE that points to the AP group?

Thanks in Advance.

Mostafa

[Rahul Govindan · Accepted solution]

You can change the Calling Station ID to AP group on the controller. This is set under Security > AAA > Radius >Authentication. You can then use this Radius attribute to make decisions based on Calling station ID.