Cisco 9800 Controller with ISE Integration for Guest Self Registation

[Balaji Lakshman Rao]

Hi Team

I'm trying to implement the guest self registration portal with cisco ISE and i successfully done the setup with Cisco 5508 controller but with cisco 9800 i was not able to do the same 

Could anyone help with this

Regards

Balaji

[marce1000]

 - FYI : https://community.cisco.com/t5/security-knowledge-base/ise-and-catalyst-9800-series-integration-guide/ta-p/3753060

  Note that you can always have a checkup of the 9800 controller configuration with the CLI command show tech wireless ; feed the output into Wireless Config Analyzer
                            The resulting advisories can help you in staging and or obtaining intended result (e.g)

 M.

[Haydn Andrews · Accepted solution]

Central WebAuth with ISE and 9800 documented here: https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html 

[Balaji Lakshman Rao]

Hi

I think this will help for this solution

i'll check and update today

Regards

Balaji

[Balaji Lakshman Rao]

Hi

I have created 2 SSID Employee / Guest

Enabled the flex profile and Guest is in centralized DHCP which is working as expected but Employee should get IP from local dhcp server

after enabled the Flex Profile i'm not able to see employee ssid itself in any of the client device

In advance tab it is in default configuration and no changed made. Could you please help here

Regards

Balaji

[Karsten Iwen]

The main question is how far you get, what state the client is in at the controller when it doesn't go further, and what the ISE log says.

[Balaji Lakshman Rao]

Hi

I have enabled the MAC Filtering in SSID Configuration. Post that When client is connected to the Guest SSID there are not getting the IP address and in Controller logs i could see that failure reason as : AAA Server was down

*Nov 25 18:55:24.622: %SESSION_MGR-5-FAIL: Chassis 1 R0/0: wncd: Authorization failed or unapplied for client (0ab7.a2af.11fd) on Interface capwap_90000002 AuditSessionID 954BA8C00000004107D627CC. Failure reason: Authc fail. Authc failure reason: AAA Server Down.

sis 1 R0/0: wncd: Authorization failed or unapplied for client (0ab7.a2af.11fd) on Interface capwap_90000002 AuditSessionID 954BA8C00000004007D5FA84. Failure reason: Authc fail. Authc failure reason: AAA Server Down.