9800 WLC Guest Portal using Aruba ClearPass

[absuizo14]

We are trying to use aruba clearpass as a guest portal for our 9800 WLC using this guide:

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217931-configure-9800-wlc-and-aruba-clearpass.html

but this guide requires that we put the APs in flexconnect which will entail downtime.. is there a guide where in the WLC, APs and clearpass are on the same site?

We tried following the guide using a spare AP but we cannot see any logs in the clearpass that the redirect is reaching it from the WLC.. 

[Rich R]

Follow the generic CWA guides and substitute Clearpass for ISE as appropriate:
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/220852-troubleshoot-central-web-authentication.html
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-9/config-guide/b_wl_17_9_cg/m_vewlc_central_web_authentication.html

[Simon Blomqvist]

Both local or central switching will work, it shouldn't have an affect. The only difference regarding authentication is whether the client's portal traffic goes through the WLC or locally switched through the AP. The WLC is still the one to send the MAB authentication to the AAA server and as long as it receives the correct Cisco AV pair attributes, it will be able to redirect the client towards the portal on clearpass.