Configuration example : central web-authentication with a switch and Identity Service Engine

[Nicolas Darchis]

This document now went live on cisco.com at the following URL:

http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080ba6514.shtml

Document ID: 113362

[aijazbeigh]

Thats great the. Can you please confirm if my understanding is correct.

1. I will assign ISE name as psn01

2. Use Ip domain name mydomain.com

3. Join ISE to my AD domain which is uk.group.local

And I can use public certificate from verisign with fqdn psn01.mydomain.com. and ISE will let me upload it.

[aijazbeigh]

Hi,

I did the change but redirect url still shows with AD domain

https://ise.home.local:8443/guestportal/gateway?sessionId=14fe1cac000000018cc78251&action=cwa

I was it expecting to turn out to be like

https://ise.mycompany.com:8443/guestportal/gateway?sessionId=14fe1cac000000018cc78251&action=cwa

After I chnaged ip domain name mycompany.com

Any Clues.

[Nicolas Darchis]

your ISE still has a certificate issued to the old FQDN, this is why it's still returning the old name for CWA.

I suggest you open a discussion in the forum to discuss your issues rather than commenting on a document though.

[scott3367]

Thank you. I have configured the central webauthentication sucessfully.

Thanks

Scott

http://www.vmexplore.com

[kapil.kumar]

Hi Nicolas,

thanks for this document, i have got my CWA working with user layer 3 vlan configured on the access switch but when i turn the layer 3 user vlan off  CWA doesnt work. would you please let me know if there is any particular setting i need to know.

i have also checked my firewall and all is allowed in firewall.

Regards,

KK