UniFi is not yet listed as a supported third party vendor. But I want to give it a try to see how far can this integration can work. :D
What are the key settings I need to look for to be available to be configured on UniFi to support ISE Wireless Guest Authentication, besides the following:
- Layer 2: MAC Filtering (For MAB)
- AAA Server (For RADIUS)
- Advanced:
* Allow AAA Override (What other name can this setting have when working with UniFi or other Vendors?)
* DHCP Address Assignment : Required (Straightforward)
* NAC: ISE NAC (This sounds to be a key setting, what exactly does this?)
* Radius Client Profiling: DHCP & HTTP
- ACLs: One for CWA (Web Redirection) and another to grant Internet access to the Guest (Airespace ACL)
That would be all the settings I need to look for to configure right? or What other setting am I missing to be supported ?
We only want to implement ISE for Wireless Guest Authentication.
That is it. Not BYOD, Not Posture, No other ISE features.
At first sight, UniFi doesn't seem to have an option available to allow configuration of ACLs. If ACLs are not supported, what other mechanisms would work?
Will appreciate recommendations and pointers,
Thanks!
