cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
274
Views
5
Helpful
3
Replies
Beginner

ISE Authorization Profile to grant limited access to Wireless Guests

Hi,

I am after building sponsored guest access for wireless guests in ISE running on software release 1.3.

I wonder if there is a way to keep the guest on the initial vlan after successful authentication and grant him Internet-Only access. I mean to say, I do not want to assign him to different vlan and restrict his access by an ACL applied on Layer-3 Vlan Interface. 

I could have done it by dACL, if the guest is connecting through the wired network, but because Wireless Controller do not accepts dACLs, I am not aware of any way to do it without changing vlan   

 

Appreciate your idea.

 

Mike

 

 

1 ACCEPTED SOLUTION

Accepted Solutions
Rising star

Sure, just create the ACL you

Sure, just create the ACL you wan't to use for your guests directly on your WLC, and then reference the name of that ACL in your authorization profile in the option called "Airespace ACL Name".

 

 

3 REPLIES 3
Rising star

Sure, just create the ACL you

Sure, just create the ACL you wan't to use for your guests directly on your WLC, and then reference the name of that ACL in your authorization profile in the option called "Airespace ACL Name".

 

 

Beginner

Thanks Jan. Appreciate your

Thanks Jan. Appreciate your pictorial answer.

Cisco Employee

(No subject)