05-30-2012 12:27 PM - edited 03-10-2019 07:08 PM
I have a somewhat large deployment coming up with several WLC dynamic interfaces assigned to an interface group, replicated across for multiple sites. I understand that ISE can return the VLAN ID to the WLC to place the client in, but if I'm using interface groups, this seems to negate the usefulness of the interface group to load clients across multiple VLANs. Not only that, but with the number of dynamic interfaces (VLAN ID's), multiplied by the number of sites, would seem to be overwhelming on the ISE side policy configuration.
Is it possible for ISE to return an Interface name/group to the WLC instead of just a VLAN ID ?
TIA
Solved! Go to Solution.
05-03-2017 10:42 AM
Please use
Airespace:Airespace-Interface-Name under Advanced Attribute Settings.
05-30-2012 10:36 PM
Is the interface name/group returned in RADIUS attributes; if so which ones?
09-05-2014 02:08 AM
If I remember correctly. It was the Airspace Interface name or similar
12-29-2014 07:59 AM
Can anyone update this ? I too am curious about returning the group as opposed to the underlying specific interface.
05-03-2017 10:42 AM
05-31-2012 06:20 PM
Upgrade you WLC to 7.2 code:
http://www.cisco.com/en/US/docs/wireless/controller/release/notes/crn7_2.html#wp919093
Sent from Cisco Technical Support iPad App
05-31-2012 10:31 PM
I understand that WLC 7.2 code can now accept the interface group name as a AAA override, which is great, but it doesn't specify the AAA source (ISE vs. ACS).
This is the example I'm questioning: (they use the VLAN ID only, instead of an interface name)
http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080bba10d.shtml#topic17
Edit:
Found the correct Attribute Under "Adv. Attribute Settings" in the Airspace Authorization Profiles (Airespace:Airespace-Interface-Name).
11-27-2013 03:06 PM
Did it work for you to only send the
Airespace:Airespace-Interface-Name from ISE to WLC ?
04-10-2014 07:43 AM
Unfortunately, the project fell through, so I was unable to test.
Did it work for you ?
05-03-2017 10:44 AM
Airespace:Airespace-Interface-Name works.
06-24-2014 12:46 AM
I use this for my setup and it is working perfectly.
ISE sets the client to the correct Interface (Name) in the Interface-Group
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide