users should redirect to Auth ISE from 9800 WLC without CWA

[Shiraz Ali]

Dear Communtity,

I am currently struggling in a stage where the end user connects to the Flex SSID and redirects to the Authentication Portal to Cisco ISE without using the Central Web Auth of the Cisco WLC 9800 . I have created Flex Redirection ACL which has been called on the policy and as well as on the Flex profile as well but i think it is currently working as Security ACL but not as a punt acl . However on the local site , users are being able to redirect to the Auth Portal. Can anyone guide

[Mark Elsen]

 - You may find this documentation useful : https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217457-configure-and-troubleshoot-external-web.html
    Note that when trying to configure the 9800 WLC for the designated purposes  ; you can always have a checkup of the current configuration with the CLI command show tech wireless ; feed the output into Wireless Config Analyzer

 M.

[MHM Cisco World]

CWA meaning using ISE for portal 

LWA meaning using wlc for portal

What you try I think can be done' you need to use LWA.

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-l-wireless-controller/220405-configure-local-web-authentication-with.html

Check this link

MHM