WLC Authentication using pre-shared key with ISE

[erajca]

We are trying to set up ISE to manage medical devices where the devices are authenticated with the WLC using a pre-shared key.

My question is whether we are able to create an authorization profile and drop this device into a specific vlan even though the authentication takes place on the WLC.

Is this possible ?

Thanks,

Ed

[paul]

Yes, if you enabled MAC Filtering under the WLAN and point at ISE you will be doing Wireless MAB authentication in addition to the PSK being done by the WLC.  Once you have control of the session in ISE you can use profiling/whitelisting to assign different devices to different VLANs.

[Jason Kunst]

Mab authenication authorizations with ise support pre shared key

You can look at http://cs.co/ise-guest and the prescriptive guide there. It talks about vlan changes with CWA logins

If you’re doing iPsk with no CWA I would think you could assign vlans check http://cs.co/ise-byod look for psk there