The link you have provided is something I am aware of. However, if you look at the document you will see that it is based on using a legacy controller such as the 5508. It does not include converged access controllers such as the 3850 or 5760.
The ACL requirements for the converged access controllers are different to the requirements of the 5508.
The ACL I have shown works and provides central web auth with the ISE.
Transferring Crash file from standby: Login to the Active WLC in HA.
From CLI: (Cisco Controller) >transfer upload datatype crash (Cisco
Controller) >transfer upload filename (Cisco
Controller) >transfer upload mode tftp (Cisco Controller) >transfer
This is the start of a display filter cross reference between Wireshark
and OmniPeek. The 1st installment is a table of advanced filters. More
filters will be added as time allows. It is a living doc, so check back
for changes every so often Please feel f...