What I'm trying to do is have a guest network that is protected by WPA2 with a PSK. Clients will connect, enter the PSK to auth to the wireless network. Then when they open a browser they will be redirected to the webauth page to enter credentials which will authenticate against an ISE server. The ISE server will stick them in a guest authz profile and return an ACL.
In reading through the cisco literature this is supposedly possible. However when I go to configure it I always get the following:
"Only PSK can be enabled for WPA with Web-Auth and Radius NAC."
I'm not sure why I'm getting this, as I only have PSK enabled, no other L2 authentication is used. See screenshots. Help!
