wired guest access via anchor WLC with CWA

[Jason Tyler]

Hi Folks,

Has anyone deployed a wireless lan solution for guest access, where wired guests are also tunnelled back to the DMZ anchor controller, whereby these wired clients are then doing CWA to ISE?

many thanks

Jason

[Timothy Abbott · Accepted solution]

I found the below configuration example that comes close to what you are referring to but the only difference is that the web authentication is handled by the controller and not a RADIUS server (ISE).  I'm pretty sure the use case you are describing isn't something our QA team has tested.  You would need to validate it in a lab to see if it works:

http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/99470-config-wiredguest-00.html

Regards,

-Tim

[Jason Tyler]

Many thanks Tim,

Yes I'm inclined to agree with regards to a QA tested approach - i've had a good search around and cannot see anything that refers to the wired/CWA via anchor wlc.

Many thanks

Jason

[Jason Kunst]

Also would recommend reaching out to wireless team to see if its something supported

I have asked some other experts paulnguy howon to chime in as well

[howon]

Not supported as evident from the GUI. The RADIUS NAC (Or ISE NAC) is missing in the pull down for Guest LAN configuration.