03-12-2018 04:18 AM - edited 02-21-2020 10:48 AM
I am trying to lab Guest Wired CWA on ISE 2.3 I am not a new to ISE, I completed few succesful installation, but non had the wired guest access. The switch is C3560v2 on IOS rel 12.2.55.SE12
On connecting the Windows 10 endpoint to the switch, I do not get Guest Portal access.
on reviewing the switch log, I can see the port has failed MAB authentication, as well as authorization.
On reviewing the ISE radius live log, I can see authentication had successed for user being unknown, and been granted the CWA permission.
Its quite confusing to me. I am attaching screenshots from ISE radius live log as well as the switch output for show port authentication.
Thanks
Solved! Go to Solution.
09-25-2018 02:48 PM
03-14-2018 02:28 PM
06-22-2018 12:15 PM
I have the same exact issue.
1) Wireless (MAB+CWA) Working great--> No issues: MAB: authc and authz successful and getting redirected
2) Wired (MAB+CWA)
1- Authorization profile: Only permit access , No issues: MAB authc and authz successful
2- Authorization profile: Permit access + CWA redirect ACL: MAB: Authc failed
So, were you able to resolve? Interesting to notice that ISE logs showing successful authc with mab however switch is showing authc failed (when i have redirect acl in authz profile).
09-25-2018 02:48 PM
09-27-2018 11:04 AM
Hi jalemanp!
Thanks for providing this useful info. I never got that working. I will give this a shot and provide an update! Thanks again!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide