cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Webcast- Catalyst 9000

ISE + Aerohive AP

270
Views
15
Helpful
0
Comments

Adds RADIUS CoA support on AP and modifies MAB parameters. Tested with Aerohive AP330 running HiveOS 6.5r8b.179369. On ISE, Auth VLAN feature was used for URL redirect and advanced flows (CWA, BYOD, Compliance). Few notable settings on Aerohive AP:

  • Enable Captive Web Portal: Unchecked
  • Enable MAC Authentication: Checked
  • Authentication Protocol: PAP
  • User Profile Application Sequence: SSID-MAC Authentication - Captive Web portal

Note: To reduce number of ISE policies, ISE can return VLAN ID sent from the AP RADIUS attribute ‘Aerohive:Aerohive-User-Profile’ for access VLAN ID for authorization.