Mobility Anchor question

[benolyndav]

Hi

we have an WLC behind a firewall and are setting up a tunnel from the WLC with a 3rd party WLC behind their Firewall, when the secure tunnel is established between the WLC's if a user wants to connect at the 3rd party side where they are broadcasting our SSID, would I need a seperate rule for Radius on the firewall to talk to ISE or would the Radius request go via the tunnel from 3rd party WLC to our WLC  and then forwarded by our WLC to ISE.??

Thanks

[Arshad Safrulla]

Assuming that your WLC will be playing the Anchor controller role, 

• Any Layer 2 Authentication will not work. 
• Any Layer 3 Auth like CWA, LWA will work, your Anchor controller will be sending the Radius request.