Web auth ACLs

[vijay kumar]

Hi all,

I am going to configre web auth for my guest users . I have created Pre-web-auth ACL in WLC allowing traffic to DNS and to ISE .

If  the authentication is successful , I will give full network access authorization to the users in ISE .

So apart from that do I have to configure anything on switch side to support web auth?

Thanks,

TS.

[Eduardo Aliaga · Accepted solution]

your question is confusing because you first talk about WLC and then you talk about switches.

If you are talking about CentralWebAuthentication with ISE and WLC, then you have to create an ACL to redirect to the captive portal. If authentication is succesful then WLC will use another ACL which permits all traffic.

You also need to configure your SSID. you have to check "radius NAC" and "aaa override"

Please rate if this helps

[Saurav Lodh · Accepted solution]

Agreeing with eduardoaliaga, I would suggest one Central web Auth on WLC using ISE, example.

http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080bead09.shtml#wlcconfiguration