I have a large Guest WiFi deployment which requirements for CWA are as below: 1) 100K guests per day, and their session can last for 7 days 2) Estimated that our system to store for 1M guest information I would like to explore whether ISE can support it. - How to scale out the CWA for ISE? (cluster support?) - How to sizing the ISE for the guest portal deployment? 3) Some of the area are using 3 rd party WiFi solution (Motorola) - - Can we support 3 rd party WiFi system? 4) C Social media support (Facebook, WeChat, etc) - Can we support Social Media with our ISE system?
... View more
To share my troubleshoot result: I found that I missed out the COA configuration on both ISE and the switch configuration. Once the COA configurations were done, the loop problem vanished.
... View more
Dear Experts, My customer had purchased two ISE Server licenses and 1500 end-point licenses. They want to setup one ISE Server in Corporate LAN and other one ISE Server in Developer LAN. By corporate policy, the two LANs are isolated. Can customer install two individual ISE Servers under single Business Entity and can two ISE Servers share the 1,500 end-points license? Regards, Rich
... View more
I am setting up a Wired Central Web Authentication demo using ISE 2.1 and Catalyst 3850. I can successfully see the redirection to Web Authentication portal. After we authentication to the Web Authentication, it looped and redirected me back to the authentication portal again. Below are the captures of what I did. Please help to see if I did anything incorrectly? Switch interface configuration: ip access-list extended ACL_WEBAUTH_REDIRECT permit udp any any eq bootpc permit udp any eq bootpc any permit tcp any any eq www permit tcp any any eq 443 permit tcp any any eq domain permit tcp any eq domain any ip access-list extended redirect-acl permit udp any any eq bootpc permit udp any eq bootpc any permit tcp any any eq www permit tcp any any eq 443 permit tcp any any eq domain permit tcp any eq domain any permit icmp any any permit tcp any any eq 8443 permit tcp any eq 8443 any permit udp any any eq domain permit udp any eq domain any ! interface GigabitEthernet1/0/13 switchport access vlan 101 switchport mode access ip access-group redirect-acl in authentication event server dead action authorize vlan 101 authentication event server dead action authorize voice authentication event server alive action reinitialize authentication host-mode multi-auth authentication open authentication order mab webauth authentication priority webauth authentication port-control auto authentication periodic authentication timer reauthenticate server mab dot1x pae authenticator spanning-tree portfast end
... View more
