03-12-2018 04:18 AM - edited 02-21-2020 10:48 AM
I am trying to lab Guest Wired CWA on ISE 2.3 I am not a new to ISE, I completed few succesful installation, but non had the wired guest access. The switch is C3560v2 on IOS rel 12.2.55.SE12
On connecting the Windows 10 endpoint to the switch, I do not get Guest Portal access.
on reviewing the switch log, I can see the port has failed MAB authentication, as well as authorization.
On reviewing the ISE radius live log, I can see authentication had successed for user being unknown, and been granted the CWA permission.
Its quite confusing to me. I am attaching screenshots from ISE radius live log as well as the switch output for show port authentication.
Thanks
Solved! Go to Solution.
09-25-2018 02:48 PM
03-14-2018 02:28 PM
06-22-2018 12:15 PM
I have the same exact issue.
1) Wireless (MAB+CWA) Working great--> No issues: MAB: authc and authz successful and getting redirected
2) Wired (MAB+CWA)
1- Authorization profile: Only permit access , No issues: MAB authc and authz successful
2- Authorization profile: Permit access + CWA redirect ACL: MAB: Authc failed
So, were you able to resolve? Interesting to notice that ISE logs showing successful authc with mab however switch is showing authc failed (when i have redirect acl in authz profile).
09-25-2018 02:48 PM
09-27-2018 11:04 AM
Hi jalemanp!
Thanks for providing this useful info. I never got that working. I will give this a shot and provide an update! Thanks again!
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: