Hello Experts,
The document is quite comprehensive and cautions against the achieve-ability of VLAN and IP address changes on via CoA via CWA through ISE stating the valid reason that, "ISE has no control over the endpoints when it is connected to an open network because there is no supplicant involved."
Unlike dot1x, a client on an open SSID with CWA through ISE holds an IP address even before having its credentials supplied on the captive portal page. The CoA post supplying of credentials can however take care of parameters like "bandwidth", "ACLs"....
We have however got a customer requirement that even the users on a guest SSID with CWA change IP and VLAN post authentication. Would there be any possible means to achieve this?
