Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

5760 Central Web Auth with ISE

Hi,

I am having problems with getting central web auth to work on the 5760, I cant seem to find any documentation for the 5760-Central Web Auth.

The setup is with a Cisco 5760 and Cisco ISE, for guest users to be re-directed to ISE guest portal to authenticate. Has anyone configured this or have any advice, that would be great.

Thanks

5 REPLIES
VIP Purple

5760 Central Web Auth with ISE

New Member

5760 Central Web Auth with ISE

Yup, I have also read the full deployment guide. Theres nothing on Central Web Auth, unless it has been renamed to another name for the IOS XE WLC.

Cisco Employee

5760 Central Web Auth with ISE

Koevi,

I believe what you are looking for is housed here:

Converged Access – Configure SSID for Central Web Authentication (CWA) using ISE on Catalyst 3850 Switches and 5760 Wireless Controller

https://supportforums.cisco.com/docs/DOC-34455

New Member

5760 Central Web Auth with ISE

Hi

Did you find an answer to this?

I have the same issue with a Cisco 3850 and ISE.

All I want to do is use a Sponsor to create the guest accounts and then use central web auth.

The Sponsor bit is easy but there is virtually no documentaion to show how to configure both the 3850 and ISE to achieve CWA. All the documentation tends to use a 5500 type WLC.

New Member

5760 Central Web Auth with ISE

Hi Roger,

I have gotten CWA running on the 5760 with ISE, below is the config for the guest SSID:

wlan Guest 1 TEST-guest

aaa-override

ip dhcp required

mac-filtering cwa_macfilter

mobility anchor 10.1.1.100

nac

no security wpa

no security wpa akm dot1x

no security wpa wpa2

no security wpa wpa2 ciphers aes

security dot1x authentication-list ISE_Auth_Group

session-timeout 14400

no shutdown

!

! ***You will need the following commands as well:

ip http server

ip http authentication local

ip http secure-server

!

aaa authentication login ISE_Auth_Group group ISE

aaa authorization network cwa_macfilter group ISE

!

Hope it helps =)

600
Views
0
Helpful
5
Replies
CreatePlease to create content