ACL in WLC in use, yet it doesn't seem to be applied on interfaces

[Pablo Pinzon]

Hello, guys

I've been checking one of WLC and found that some of the ACL, which are currently getting increasing counters, don't seem to be applied on any of the interfaces. I checked all of them and none have the ACL applied. 

Where else could it be applied so that it's currently in use? 

[Karsten Iwen]

Do you have an AAA-server like the ISE running? This device could tell the WLC to apply an ACL dynamically when a user connects.

[Pablo Pinzon]

Well, we do have an ISE running the AAA for some wlans. Where in the ISE could I see if it's applying the ACLs?

[Karsten Iwen · Accepted solution]

First you go to Policy -> Policy Elements -> Results -> Authorization -> Authorization Profiles

There you find all you profiles and can look which ones have the option "Airespace ACL Name" configured. These are the ACL-names you have on your WLC.

Then you go to to your Authorization Policy and look who gets this Authorization Profile assigned.

[Pablo Pinzon]

found it right there. Thanks!