Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Cisco ISE - Guest Network

I'm attempting to setup our guest network with ISE and I am having problems getting the web agent to show up.  I've attached the rules I'm using and the authentication information.

Everyone's tags (5)
4 REPLIES

Cisco ISE - Guest Network

David,

Try adding a condition where the posturestatus not equals to complaint. That should be under the Session dictionary.

thanks,

Tarik Admani
*Please rate helpful posts*

Tarik Admani *Please rate helpful posts*
Community Member

Cisco ISE - Guest Network

This is the result now, not getting a web agent on authentication.  Not sure why it says the posture status is not applicable.

Policy

Live Authorization

Re: Cisco ISE - Guest Network

How are you performing the web authentication (are you using local web authentication or central web authentication)?

Also the following which is documented in the latest WLC 7.2.110 release notes:

"RADIUS NAC with Layer3 web authentication security (local web authentication) is not supported."

Thanks,

Tarik Admani
*Please rate helpful posts*

Tarik Admani *Please rate helpful posts*
Cisco Employee

Cisco ISE - Guest Network

FYI

WLC 7.1.x only supports LWA, not CWA.  WLC 7.2.x, which is compatible with the 2500, 5500 series and WiSM 2 WLCs  supports either CWA or LWA.  WLC 7.1.x Non-802.1X WLANs (including those using  LWA) do not support MAB, CoA, Posture, Profiling; WLC 7.2 MR1 Non-802.1X WLAN  supports CoA and profiling. VLAN assignment is possible with MAC Filtering, but  not LWA

686
Views
0
Helpful
4
Replies
CreatePlease to create content