I'd like to setup a ISE (Cisco UCS C220 M4) for Guest Web Authentication.
It is a physical box.
An IP address is assigned to GiETH0 port with 10.20.20.20.
Guest users connect to SSID and get IPs from ISE in 192.168.1.0/24
Do I need to create an another interface with different VLAN on ISE box.
That's up to you. If you want to, you can create a dedicated guest interface for this service, or you can use the same management/radius traffic interface.
If you use a special interface for guest services you need to add a static route for the guest LAN + some alias so that the redirect would work properly.
Either way you have to allow your guest machines to connect to ISE's guest portal.
Check ISE ports reference:
Web auth page is getting redirected,but it is getting looped even after successful login.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: