New ISE Guest Connect Setup

[s.kanth]

Hi Guys,

I'd like to setup a ISE (Cisco UCS C220 M4) for Guest Web Authentication.

It is a physical box.

An IP address is assigned to GiETH0 port with 10.20.20.20.

Guest users connect to SSID and get IPs from ISE in 192.168.1.0/24

Do I need to create an another interface with different VLAN on ISE box. 

Please help.

[Octavian Szolga]

Hi,

That's up to you. If you want to, you can create a dedicated guest interface for this service, or you can use the same management/radius traffic interface.

If you use a special interface for guest services you need to add a static route for the guest LAN + some alias so that the redirect would work properly.

Either way you have to allow your guest machines to connect to ISE's guest portal.

Check ISE ports reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/install_guide/b_ise_InstallationGuide23/b_ise_InstallationGuide23_chapter_0110.html

Regards,

Octavian

[s.kanth]

Web auth page is getting redirected,but it is getting looped even after successful login.