Corportae laptop and mobile device access

[ittechk4u1]

Hello All,

I have ISE, WLC and Cisco APs.

I have a wlan which provides access to corporate laptops(EAP-TLS).Now a requirement is there is to provide access to corporate mobile devices(windows, androids, Apple).

Question:

What kind of sloution i can implement so that if Corporate mobile device connects to wlan then ISE pass them in direction to INternet and all other external mobile must not get access.

Thanks

[Saurav Lodh]

Hello ,

You can refer this design for white-listing /on-boarding corporate devices, you can ignore the Security Tags , from the authorization rules, just use access-accept/ deny access

http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/BYOD_Design_Guide/BYOD_Limited_Use_Case.pdf

[Leo Laohoo]

It's called 802.1x.  

Due to the complexity of the design, I'd recommend you get a reputable systems integrator on board.