cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
577
Views
0
Helpful
2
Replies

New ISE Guest Connect Setup

s.kanth
Beginner
Beginner

Hi Guys,

 

I'd like to setup a ISE (Cisco UCS C220 M4) for Guest Web Authentication.

 

It is a physical box.

 

An IP address is assigned to GiETH0 port with 10.20.20.20.

 

Guest users connect to SSID and get IPs from ISE in 192.168.1.0/24

 

Do I need to create an another interface with different VLAN on ISE box. 

 

Please help.

 

 

 

 

2 Replies 2

Octavian Szolga
Enthusiast
Enthusiast

Hi,

 

That's up to you. If you want to, you can create a dedicated guest interface for this service, or you can use the same management/radius traffic interface.

If you use a special interface for guest services you need to add a static route for the guest LAN + some alias so that the redirect would work properly.

 

Either way you have to allow your guest machines to connect to ISE's guest portal.

Check ISE ports reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/install_guide/b_ise_InstallationGuide23/b_ise_InstallationGuide23_chapter_0110.html

 

Regards,

Octavian

s.kanth
Beginner
Beginner

Web auth page is getting redirected,but it is getting looped even after successful login.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers