WLC - Any negative impact by enabling 'Apply Cisco ISE Default Settings'?

[atsukane]

Hi all,

Question regarding 'Apply Cisco ISE Default Settings' on WLC.

Am I correct in thinking this needs to be enabled globally before this can be enabled on per WLAN basis?

As enabling this on a WLAN didn't stick and just disabled itself.

If this needs to be enabled globally first, is there any impact to WLANs?

WLC 5508 v8.5.161.0

Many thanks,

[Ruben Cocheno]

@atsukane 

I don't recaall any issues doing thaat in the past, however give a look on release notes and check if there is something that you need to reconsider before doing that.

[Colby LeMaire · Accepted solution]

I don't have access to an AireOS WLC at the moment but that setting is really just a macro to make configuration easier for you.  So when you select that checkbox and apply, it goes and configures certain settings for you so you don't have to do it yourself.  Things like enabling CoA, AAA Override, copying the same Radius server information from authentication to accounting, set NAC State to ISE NAC, etc.  So when you say it disables itself, can you verify the other settings to see if they are still set?  I believe it clears after you apply.

[atsukane]

@Colby LeMaire 

Thanks, you're right, when you click that option in Security > RADIUS copies RADIUS > Authentication, it automatically creates Accounting server. Similary in WLAN AAA servers setting, it copies the same server from Authentication to Accounting, and so on.

It seems it just clears the tick box once it has done its job.

Thanks,