Hello,
We currently use ACS for RADIUS to authenticate users when connecting to a specific WLAN. We want to migrate this into our existing ISE 2.4 environment, but I am having a difficult time understanding the flow of how this works. Thus far, here is what I have done:
1. ISE PN has been added as a RADIUS server on the WLC and assigned to the WLAN.
2. The WLC has been added into ISE.
3. ISE is already connected with AD.
What I am looking to do is create a policy that authenticates users connecting to SSID1 through Active Directory, validating their user name and that they are part of the SSID1 AD group. If authentication is verified, we want to allow access on the SSID. Nothing else.
What is the best way to go about this? I'm a novice when in comes to ISE and the way it is laid out is very confusing for me.
Thanks!
