hello experts,
i will have to deploy ISE solution in my setup for guest , but the need is to have the data switched locally.
the anchor controller which will be a 9800 along with ISE will be deployed in the DC.
so any remote site which has a local wlc cannot use a conventional method of foreign/anchor solution with central switching , because my customer wants to have the data traffic switched locally via the local internet breakout.
so in this case my local wlc can talk directly to ISE and can still have the data switched locally , i referred to this LINK https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html
the same thing goes with the remote which does not have a local controller but have only flex ap's , i think in that case the wlc on which they are registered can directly talk to ISE using the same method and then the ssid simply needs to mapped to the desired internet subnet .
please advise if i am making sense.
