cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
286
Views
2
Helpful
2
Replies

9800 WLC Guest Portal using Aruba ClearPass

absuizo14
Level 1
Level 1

We are trying to use aruba clearpass as a guest portal for our 9800 WLC using this guide:

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217931-configure-9800-wlc-and-aruba-clearpass.html

but this guide requires that we put the APs in flexconnect which will entail downtime.. is there a guide where in the WLC, APs and clearpass are on the same site?

 

We tried following the guide using a spare AP but we cannot see any logs in the clearpass that the redirect is reaching it from the WLC.. 

2 Replies 2

Rich R
VIP
VIP

Follow the generic CWA guides and substitute Clearpass for ISE as appropriate:
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/220852-troubleshoot-central-web-authentication.html
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-9/config-guide/b_wl_17_9_cg/m_vewlc_central_web_authentication.html

Simon Blomqvist
Level 1
Level 1

Both local or central switching will work, it shouldn't have an affect. The only difference regarding authentication is whether the client's portal traffic goes through the WLC or locally switched through the AP. The WLC is still the one to send the MAB authentication to the AAA server and as long as it receives the correct Cisco AV pair attributes, it will be able to redirect the client towards the portal on clearpass.

Review Cisco Networking for a $25 gift card