Hi Chaps, I have 3 ACLs configured on a WLC for CWA, Corp and Guest users. On local mode APs, theses are called up using the Airespace fields in the ISE policies dependant on what rule is hit. ACL-WEBAUTH-REDIRECT ACL-PERMIT-CORP-TRAFFIC ACL-PERMIT-GUEST-TRAFFIC Will FlexConnect APs call up the ACLs in the same way as a local mode as the WLAN will be AAA Override/RADIUS NAC or will FC ACLs be required. Cheers, N ... View more

Hi Guys, I have a customer who current is using the cwa portal for guest access. Corporate use will be added in the future sometime next year. Kit involved: 5508 - Internal (Inside Net) 5508 - Anchor (DMZ Net) ISE - Inside Net 3600 APs Presently, guest user connects, anchored to DMZ 5508, issued IP address from server in DMZ and DNS redirect to the web portal from same server. guest logs in and internet access through ASA and then content filtering box. They want a solution whereby they do not have to use the portal for corporate user with their own devices such as ipads. I know BYOD is a possiblity but would involve using a CA server on the inside of the network. This is not something I'm keen as it opens a channel from the guest network directly to their AD infrastructure. I'm leaning toward PEAP authentication atm using a GoDaddy SSL cert that is already installed. This would bypass the portal system and only involve client devices being configured once. Is there any other option that would be simple to setup as this is on a limited timescale ? Cheers, Nick ... View more