Wired 802.1x certificate authentication with URL redirect to ISE portal

[CB90021204]

Hello,

Wondering if anyone has tried to authenticate users with certificates & then also send back a URL redirect as part of the authorization profile?

My goal is to provide different levels of access to users based on the ISE policy matched. I can already authenticate the users with certificate based authentication and provide different levels of wired/wireless access.

What I'm not sure about is if I can also push down a URL redirect as part of the same authorization profile which directs the user to a custom ISE portal informing them which level of access they have been granted. I have done this with Guest access previously, just not certificate based auth.

Has anyone done this before or know if its possible?

Thanks,

[poongarg · Accepted solution]

Refer below Cisco Live presentation (p136), which talks about 802.1x and CWA Chaining.

https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2016/pdf/BRKSEC-3697.pdf

[CB90021204]

Thanks for the information, just watched that session. Very helpful.