Is it possible to configure Open mode at wlc C9800

[Leftz]

Hi WLC c9800 is configured with 802.1x and via ISE. We know we can configure Open mode at switch for 802.1x /ISE. Is it possible to configure Open mode at C9800? Thank you

[Mark Elsen]

 - Ref : https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213919-configure-802-1x-authentication-on-catal.html#anc8

   Except in Step 3 choose : 

•  None—No Layer 2 security.

  M.

[Tony Rosolek]

I'm not aware of such option on the WLC. Maybe there is an option directly on the ISE, that it configures it to (blindly) accept all clients. The ISE controls the access and the WLC is just doing what the ISE tells it to do. 

With WPA2-Enterprise SSIDs encryption keys are negotiated between ISE and client. These keys are needed for encryption. Or instead of WPA2-Enterprise you use a completely open and unencrypted SSID.

[Leftz]

Thank you for your reply. I also doubt there is the option in WLC. We can use No layer 2 security or psk, but it totally by pass ISE, so that we would not know status of ISE