01-19-2017 04:30 AM
Hi Team,
A customer is looking to build a Public WiFi infrastructure to aggregate services across multiple MNOs and also other customers (such retailers, etc) on a SINGLE UNIVERSAL SSID. This new solution will offer the following services:
The most challenging piece of this design is the requirement to broadcast ONE SINGLE SSID for All services except 3G offload EAP-SIM clients.
In other words:
The hidden HS2.0 enabled SSID is quite easy as it will be using EoGRE to the MNO's iWAG and that's a standard configuration done on a per SSID bases. Now the challenging part is the other UNIVERSAL SSID.
On that UNIVERSAL SSID, My customer wants to display a landing page with options for multiple MNOs [Please click if you are a Vodafone customer, T-Systems customer, AT&T Customer, Verizon customer, etc].... OR [Please click if you are Starbucks customer, Fridays customer, etc]..... OR [Please click if you would like a WiFi pass for 1hour, 2hour, etc].
Essentially, this UNIVERSAL SSID must be serving all the following:
MNO traffic needs to be authenticated against the MNO Radius/AAA and also breaks-out through the MNO network for LI (Lawful Inspection) and accounting purposes. I proposed Cisco ISE integration with Meraki for the following features:
Users should be authenticating as follows:
Now my question is, how can a single UNIVERSAL SSID do the following:
Thanks for your help,
Sameh
Solved! Go to Solution.
01-19-2017 07:02 AM
Sameh this is not something easily done with ISE and it would be best to look into Cisco Service Provider EMSP perhaps? If you could do something with ISE seems like heavy customization.
This is really an internal design discussion with advanced services or a partner who might be possible to do such an advanced integration.
Regardless again at this point its not something easily answered, designed or vetted in a forum like this. The best bet would be to engage Cisco AS if its something you still want to pursue with ISE.
My initials thoughts are I don’t think ISE is the product you want to place in there
01-19-2017 07:02 AM
Sameh this is not something easily done with ISE and it would be best to look into Cisco Service Provider EMSP perhaps? If you could do something with ISE seems like heavy customization.
This is really an internal design discussion with advanced services or a partner who might be possible to do such an advanced integration.
Regardless again at this point its not something easily answered, designed or vetted in a forum like this. The best bet would be to engage Cisco AS if its something you still want to pursue with ISE.
My initials thoughts are I don’t think ISE is the product you want to place in there
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide