WLC 5508 8.2.170 and ISE 3.0 Authorization Issue.

[ifabrizio]

I configured in a test environment, a windows 10 client, which authenticates using EAP-TLS. Up to here everything works.

The problems arrived with the authorization phase, despite having configured the access list on the WLC, the ISE is unable to use it, even if in the authorization profile I checked the Airspace ACL name, specifying the name of the ACL created on the WLC.

Any suggestions?

Same details:

On the Ise the part of Autorization profile:

The Ise live log about the authentication and authorization show that Ise choose the right policy:

The strange thing is that in the results, the AV-Pairs and the ACL specified in the authorization profile are not indicated:

On the WLC the ACL:

There are two WLCs the foreign and an anchor, the WLAN is on both. It works fine but the ACL is not enforced.
I know the versions are old, and I have already planned the ISE upgrade, and the WLC foreign replacement, but for now I have to use it.

[Prince.O]

Not sure if you found a resolution to this but I see you have a number "1" set as the "ACL Name" . I would suggest trying to set an actual name and see if this sends the ACL value you want to send to the WLC. 

It may also be a bug on ISE 3.0 , 3.1 is the recommended. You can open a TAC case to investigate if you still see issues