Showing results for 
Search instead for 
Did you mean: 

Native Profiling (WLC v7.6) + Web Auth

Hi All,

I am using WLC 5508 v7.6 and configured local client profiling [http and dhcp] in SSID with Web-Auth only. The profiling is configured to have Apple IOS devices mapped to certain VLAN and leaving other devices like  Windows-Workstation to a default VLAN mapped to via AP Grouping.

This actually works when I am only using L2 (WPA-PSK) as authentication method. But when using L3 Web auth, we can't get the VLAN mapping works. But the device is properly profiled.

It this a limitation of this feature?



2 Replies 2

Scott Fella
Hall of Fame Guru Hall of Fame Guru
Hall of Fame Guru

The reason for this is that WebAuth is a layer 3 authentication method in which the devices have to associate and obtain an ip address.   You will not be able to set a vlan to a guest user, because they already have an ip address assigned to them.  This is the same scenario when using ISE or any other radius.  You would need to send a CoA and disassociate the device, know the mac so when it attempts to associate again, the WLC will put them on the correct vlan.... doesn't work this way though.



*****Help out other by using the rating system and marking answered questions as "Answered"*****

*** Please rate helpful posts ***

Hi Scott,

Thanks for the reply. So. You mean this is possible when using WLC and ISE?

Sent from Cisco Technical Support iPhone App

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers