Regarding Authorization profile in ISE

[jain.manish94]

Team actually i am confused when we create any authentication profile in Cisco ise where we on web authentication and vlan for example vlan 100.

My question is that from where Cisco ise give ip address to all the devices from this vlan 100.

Plz team want to know all the setup and flow and configuration.

[Haydn Andrews]

ISE wont hand out the IP address in a web authentication setup, or any other authentication setup.

For Web authentication the WLC (if in local mode) will drop the client onto the interface/ vlan configured for the SSID.

Config guide for webauth with ISE is here: https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html

If its not webauth then ISE can return a aireospace value of the WLC interface or VLAN to move the client into based on the ISE policy

[jain.manish94]

Sorry my mistake actually using corporate SSID and using Authorization profile with accept access and vlan 1000

Now from where it will get ip