Flexconnect Authen Using ISE

[tppatrick1]

Hi All,

Do we need any special configurations on ISE and Flexconnect SSID to authenticate with username and password? We are using C9800-CL

Any help or support is appreciated.

Thanks 

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/216130-configure-catalyst-9800-wlc-ipsk-with-ci.html

Check this guide it for iPSK but also apply to PSK.

MHM

[tppatrick1]

Thank you so much @MHM Cisco World

[MHM Cisco World]

You are so welcome friend 

MHM

[marce1000]

 - In essence not , meaning the authentication schemes will not vary on Flexconnect ; you can always have a review of the intended C9800-CL configuration with the CLI command show tech wireless and feed the output into Wireless Config Analyzer

 M.

[tppatrick1]

Thank you

[ammahend]

Your Network Access Device (NAD) will be AP subnet if the authentication is no set to central and it will be Controller mgmt IP if your authentication is central (which most people would do), policy logic will remain same more or less, you can read more here

[tppatrick1]

Thank you, @ammahend. I will go through the guide and feedback. 

[Rich R]

> ISE to authenticate with username and password
Presume by that you mean web auth - for that you should refer to:
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html and 
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/17-9/config-guide/b_wl_17_9_cg/m_vewlc_central_web_authentication.html

As Marce said flex local or central switching doesn't make much difference but it will need to be central authentication.

If you're referring to 802.1x then it can be done as flex local authentication whereby the AP sends the radius directly to the ISE for authentication independently of the WLC.
https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213921-flexconnect-configuration-with-central-a.html

[tppatrick1]

Thank you @Rich R I will use the links provided.