cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

258
Views
0
Helpful
2
Replies
Highlighted

Native Profiling (WLC v7.6) + Web Auth

Hi All,

I am using WLC 5508 v7.6 and configured local client profiling [http and dhcp] in SSID with Web-Auth only. The profiling is configured to have Apple IOS devices mapped to certain VLAN and leaving other devices like  Windows-Workstation to a default VLAN mapped to via AP Grouping.

This actually works when I am only using L2 (WPA-PSK) as authentication method. But when using L3 Web auth, we can't get the VLAN mapping works. But the device is properly profiled.

It this a limitation of this feature?

Regards,

Dave

Everyone's tags (3)
2 REPLIES 2
Hall of Fame Master

Native Profiling (WLC v7.6) + Web Auth

The reason for this is that WebAuth is a layer 3 authentication method in which the devices have to associate and obtain an ip address.   You will not be able to set a vlan to a guest user, because they already have an ip address assigned to them.  This is the same scenario when using ISE or any other radius.  You would need to send a CoA and disassociate the device, know the mac so when it attempts to associate again, the WLC will put them on the correct vlan.... doesn't work this way though.

Thanks,

Scott

*****Help out other by using the rating system and marking answered questions as "Answered"*****

-Scott
*** Please rate helpful posts ***

Re: Native Profiling (WLC v7.6) + Web Auth

Hi Scott,

Thanks for the reply. So. You mean this is possible when using WLC and ISE?

Sent from Cisco Technical Support iPhone App

CreatePlease to create content
Content for Community-Ad

August's Community Spotlight Awards