Cisco WLC 8.5 with ISE 2.3

[User24571]

Hi All,

I have a question about Cisco WLC 8.5 and ISE 2.3.

Can I to do accounting from WLC to ISE via RADIUS without authentication?

On WLC, I have local user database (net user) to web-auth and I want to send any trace to ISE (user id, ip address, MAC.. and SSID..?)

Can this be done? If so how?

[Scott Fella]

I don’t believe you can without sending authentication and authorization. You can try to just set the accounting and see if it shoots out an error. You can always move your local user accounts into ISE.

[User24571]

Hmm.. any workaround? For example: authentication on WLC from local database and authorization ("permit any"?) and accounting on ISE?

[Scott Fella]

You would have to test that your self to be honest. Typically when you do 802.1x, you do everything on one and usually done in radius. Since ISE isn’t being used for that, it should be easy to test that with a new ssid and radius policy.