Showing results for 
Search instead for 
Did you mean: 

CWA Guest WLAN with ISE (in SDA fabric)




I am facing an issue and perhaps someone can help me here.

I have a SDA fabric with 2 x 9800 in SSO cluster mode, 2 ISE in the LAN; configured for the 802.1x SSIDs (let's say they have IP address and We have configured these 2 ISE on the DNAC and it has been pushed on all our fabric devices, 9800 included.

We also have 2 other PSN ISE in the DMZ (let's say and with guest portal, that we want to use for the guest redirection. We configured a template editor with the correct ACL, and we are well redirected, but we are facing Error 400, because the request is always sent to the LAN ISEs and not to the DMZ ISEs, so the portal is never showing.


We tried to configure the ISE servers and manually on the 9800, and changed the configuration of the guest SSID to match a specific AAA method list which is linked to the DMZ ISE, but it's never working.

On the client session on the 9800, we see that the good redirect URL is sent to the client, with IP address, but on the ISE Radius live logs, we see that the is always answering to the request ...


Did someone face the same issue ? I hope I explained my issue correctly.


Thank you.



0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers