WLC Web Auth Redirect URL point to an ISE Policy NODE only?

[ajc]

Hi all,

I was wondering if the Web Auth Redirect URL configured in the WLC can only point to an ISE Policy Persona Node so the Web Portal feature (see below) in the ISE is only active when the ISE device has that Policy Persona activated.

[Peter Koltl · Accepted solution]

It's called

Policy Services persona

and the node is called

Policy Services Node (PSN) (if no other persona is enabled on the node).

I would say your assumption is right. The Administration persona and the Monitoring persona are not capable of hosting the My Devices portal.

[ajc]

Thanks Peter for your clarification regarding the semantic I used and the question I made.

Curiously, I tested it (configure the WLC Web Auth URL Redirect pointing to an ADM Node) and it did not work until I added the Policy Services persona into that ADM Node. I just wanted to verify that my test was correct because we want to make some changes in our deployment. Let me see if I can open a TAC Case in order to confirm this and add it to this post.

[Venkatesh Attuluri · Accepted solution]

You need to have a PSN to perform CWA . PSN Provides network access, posture, guest access, client provisioning, and profiling services. This persona evaluates the policies and makes all the decisions. You can have more than one node assume this persona.