VLAN for WLC interface (ISE Policies Based on SSID)

[nicanor00]

I have ISE 1.1 and WLC 2504

I used this link http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080bed902.shtml

But I am confuse on the WLC configuration

If I have only one ESSID for corporate user(and many DATA vlan because each AD group is assosiated to one specific  VLAN)

I have already created Management interface associated with management Vlan

Wich interface interface should I associate on the corparate WAN ( WLAN  -->General --->Interface/interface group)  ?

Should I create another interface ? wich Vlan ID should I associate to this interface

or should I use Management  interface

Please advise

[Tarik Admani]

Hi,

For all the vlans you want to assign through ISE, that vlan interface will have to exist on the controller as well, and will need to be trunked or assigned to a specific interface on the controller itself.

The management interface is used for management traffic (i.e. logging into the gui of the controller), the seperate interfaces are usually assigned to a vlan which are user specific, that information is used to tag the data that the clients are either mapped to by associated to an SSID or being dynamically assigned with AAA override (radius assigned).

Tarik Admani
*Please rate helpful posts*

[maldehne]

check the following links , they are very helpful:

http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a00808c9bd1.shtml

http://www.cisco.com/en/US/products/ps10315/products_configuration_example09186a0080bc8129.shtml

http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configuration_example09186a008076317c.shtml

------------------------------------------------------------------------------------

Please make sure to rate correct answers