Guest authentication in ISE

[vijay kumar]

Hi All,

We are having two SSID in WLC. We are planning that both SSID users has to get authenticate through ISE by Web auth .

One SSID users will get authenticate via guest accounts created by sponsor. Another SSID need to get authenticate by AD user group.

So , in ISE if it is possible to ceate two seperate rules for the SSID's?

Thanks!

TS.

[mmangat · Accepted solution]

Hello,

Please have a look at this short cisco doc that shows ISE Policies Based  on SSID Configuration Examples.

http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080bed902.shtml

[Amjad Abdullah]

Mantej,

Very useful doc. +5.

Vijay: Mantej doc provided shows two different methods to achive your goal. It should be what you are exactly looking for.

Regards,

Amjad

Rating useful replies is more useful than saying "Thank you"

[vijay kumar]

Thanks a lot mantej.

[Amjad Abdullah · Accepted solution]

Hi Vijay,

I am not an ISE guy, but from my understanding to the concept of the policy model on which the ISE is based I can say "yes. It is possible".

You need to create two different identity sources based on which SSID the user is connecting.

If a user is connecting to SSID1 then check credentials locally.

If a user is connecting to SSID2 then check credentials on AD.

HTH

Amjad

p.s: the term "identity source" is from Cisco ACS 5.x. in ISE you may have same or different name but with same concept.

Rating useful replies is more useful than saying "Thank you"