C9800 local site & flex sites AAA override

[lenkasurat]

Hello All,

I have a query if we can configure 2 x c9800 in HA SSO mode and with local & branch office, means local & flex sites. And implement AAA override? 

[Rasika Nayanajith]

You can refer below document
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213924-flexconnect-wlan-with-802-1x-aaa-overrid.html 

HTH
Rasika
*** Pls rate all useful responses ***

[lenkasurat]

Hello Rasika, Thank you for the quick response! does it means than we have to configure local site as well to flex connect mode? 

[Rasika Nayanajith]

For branch AP you apply site tag which got 'Flex profile" attached. For local site APs you assign a site tag which does not have a FlexProfile attached.

HTH
Rasika

[lenkasurat]

Thank you so much! Looks very impressive, will appreciate if you can share any document! according to me 2 attributes rules cannot be configured with 1 IP address in ISE hence, I am not confident. 

[MHM Cisco World]

first the AP flex meaning no role for WLC so LWA can be config you need CWA i.e. the portal is one ISE 

https://www.cisco.com/c/en/us/support/docs/wireless/wireless-lan-controller-software/221229-configure-cwa-with-flexconnect-aps-on-a.html

MHM