Cisco WLC and ISE 2.3 with iPSK not working

[fhl-network]

Hey Folks,

we use a WLC 5520 Series Cluster and ISE 2.3 Appliance for "Guest-Wi-Fi", which is working.

Now, we would use iPSK additionally for IoT-like Devices with own pre-shared keys.

We used this how-to, to implement iPSK:

https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-5/b_Identity_PSK_Feature_Deployment_Guide.html

If we check our ISE, the created Rule is hitted an the iPSK-Device Rule says:

11002

Returned RADIUS Access-Accept

But on the device, it says wrong PSK, try again, if we use the device PSK.

It only works with the global PSK "12345678" but not with the device PSK "abc12345" as given in the how-to.

We've checked the settings several times, we couldn't find an error.

Do you have any ideas?

Thanks in advance!

Best regards,

Matthias

[patoberli]

Which firmware is running on the WLC?

[fhl-network]

Thank you for your quick response.

Cisco Wireless Controller: 8.3.141.0

Cisco ISE: 2.3.0.298

[patoberli · Accepted solution]

That's what I thought. iPSK is a WLC 8.5 feature, based on this site: https://www.cisco.com/c/en/us/products/collateral/wireless/8500-series-wireless-controllers/bulletin-c25-739409.html
So I guess you first need to upgrade to 8.5. If you have time, wait 2 more weeks and then, if nothing negative mentioned in the forums, go to the brand new 8.5.140.0 release.

[fhl-network]

Thank you very much - upgrading to 8.5.135.0 did the trick! :-)

We'll upgrade to 8.5.140.0 when it's suggested.