I am after building sponsored guest access for wireless guests in ISE running on software release 1.3.
I wonder if there is a way to keep the guest on the initial vlan after successful authentication and grant him Internet-Only access. I mean to say, I do not want to assign him to different vlan and restrict his access by an ACL applied on Layer-3 Vlan Interface.
I could have done it by dACL, if the guest is connecting through the wired network, but because Wireless Controller do not accepts dACLs, I am not aware of any way to do it without changing vlan
Appreciate your idea.
Solved! Go to Solution.