Thanks you very much And on your ISE, you just enter in the authZ profile the interface template : AP-Authz ? no VLAN or DACL ? 

dear jkyt@nnit.com Thank you for your answer, i am blocked at this step "Also set the AP port to access mode and switch it to trunk via interface template during AP authentication."is it possble to share a sample of your conf please ?Thank you very m...