Cant get IP address on anyconnect client laptop for virtual wlc using flexconnect

[uzochikwa]

Hi Everyone,

I have a little problem which i would be grateful for the help. I have setup with a virtual wlc, a PAN and PSN , an AP and a laptop with anyconnect client. There is a mangement interface (ESXI) and two SSIDs created for internal and guest users respectively. The AP is in flexconnect mode and both ssids are using the management interface. 

The AP has an ip address. I have configured layer 2,3 and advanced parameters for the wlan ssids  as per documentation

INTERNAL-USERS layer 2 wpa+wpa2 +802.1x layer 3 none advance ISE NAC enabled 

GUEST-USER layer 2 mac filtering layer 3 none advanced ISE NAC enabled

Similar to what is  above. When connecting the anyconnect client to the INTERNAL SSID i get ip address and can browse. when i connect to the GUEST SSID my laptop gets no ip address. SO what do i do? there is a local dhcp server which the laptop connects to. how do i connect to the guest ssid with anyconnect because i want the ISE to do authentication and central web auth redirect for the guest

Regards,

U

[Rasika Nayanajith · Accepted solution]

Hi 

Pls have a look at below documents if you are doing CWA with your Guest SSID, that should explain required steps in detail

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

HTH

Rasika

*** Pls rate all useful responses ***

[uzochikwa]

Hi,

Thanks. but is the document relevant to flexconnect? as flexconnect mode is configured on AP. Also its virtual wlc. Isnt this document more suited? What are your thoughts?

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116087-configure-cwa-wlc-ise-00.html

Regards,

U

[Rasika Nayanajith · Accepted solution]

Yes. for FlexConnect, link you provided is the right one.

Both documentation done by same person, so you should have consistent information

HTH

Rasika