Users to authenticate through web portal using their AD credenials.

[patil.sah1]

Requirement to create policy for set of users, to authenticate user via web authentication through wired network

Requirements:

1. User must authenticate using AD credentials

2. Have login page to put the username and password.

3. Will not use certificate or posture

4. will use  mschap v2 protocol

Basically connecting a computer through wired and it will redirect to a portal page and login the username/password from AD to access dedicated VLAN network post authentication.

[Mike.Cifelli · Accepted solution]

You can accomplish this utilizing the guest portal in ISE. I would start here: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_01111.html

Setup your authz policy conditions as you wish, but ensure that your authz result redirects them to the portal. Good luck & HTH!

[Jason Kunst]

Yes also check out the prescriptive guest guide under http://cs.co/ise-guest