Greetings,
Im wondering if can use CWR for this scenario:
1. User recieve credentials for 802.1x auth on reception. Database can be situated in ISE as well as Radius role is relying on the ISE.
2. User logs in using 802.1x and the Radius Server (ISE) sends to the WLC the av-pair with url to web page* (ISE?).
*The role of the web page is to get user phone number and send the special kind of code on this number. Code is unique and corresponds to this phone number.
3. User fills the field with his phone number, press OK, web page tells him to give password corresponding for this phone number.
4. ISE(other sms gateway?) sends password for this number to auth user.
5. User enters the code on the web page, press OK.
6. Radius sends COA or some sort of reauth to reauth user and grants him full access.
Cant find any information about this scenario :(
The problems that I faced:
1. How to tell ISE, that user sends correct code (how to associate user, who will make HTTP-POST with wireless user).
2. How to tell ISE to make COA when user sends correct code
3. Can't find any examples of useng CWR
Any kind of information would be useful, Thanks!