AD authentication with ISE / WLC configuration

[bberry]

Can anyone point me in the direction of documentation or sample configs for using AD accounts to authenticate connecting to SSID on WLC? I am trying to setup a new SSID on a 5508 WLC that only a specific AD group can connect to. I gather that I will have to have 802.1x implemented for this or can the user simply be prompted for credentials? We are a new ISE implementation and this is the first time I have tried to interface everything. We have a guest portal up and operational and it works great for the two or three day guest but now are trying to set something up for the extended time type guest. 

Sorry to be as clear as mud but we are a new ISE user. Thanks in advance...

Brent
 

[Jatin Katyal]

You should go through the below listed document - Rule B

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115734-ise-policies-ssid-00.html#configs

In Rule B, it has configured authz with 2 conditions SSID and External group.

Regards,

Jatin Katyal

** Do rate helpful posts **

[mohanak]

802.1X Authentication via WiFi – Active Directory + Network Policy Server + Cisco WLAN + Group Policy