Anyone? 
Mike. 

From: mike_c...@hotmail.com
To: ccie_security@onlinestudylist.com; j...@boyakasha.dk
Date: Wed, 6 Nov 2013 12:24:08 -0600
Subject: [OSL | CCIE_Security] FW:  ISE authentication for CWA and WLC






From: mike_c...@hotmail.com
To: pio...@ipexpert.com
Subject: RE: [OSL | CCIE_Security] ISE authentication for CWA and WLC
Date: Wed, 6 Nov 2013 12:23:38 -0600




Hi Piotr; 

It says:
Dynamic Authorization failed
                                                                                
                                                :
                                                                                
                                                11213 No response received from 
Network Access Device
Network Device:
                                                                                
                                        
                                                                                
                                        
                                                                                
                                                GUEST_WLC
                                                                                
                                                :
                                                                                
                                                192.168.200.2
                                                                                
                                                : 
                                                                                
                                                

However, the Wireless client is set to the corresponding Vlan, it gets an IP on 
the Employee subnet, and it goes to the employee interface on the WLC. 

Jan; 

That's part of the Lab and works like a charm everytime. When the user 
authenticate on the Guest portal, it does CoA and the new profile is being 
downloaded from the ISE (based on those credentials). Then a Java applet runs 
that changes the network parameters on the NIC and starts a new DHCP request 
for the Employee subnet. 


Mike. 

Date: Wed, 6 Nov 2013 13:26:24 +0100
Subject: Re: [OSL | CCIE_Security] ISE authentication for CWA and WLC
From: pio...@ipexpert.com
To: mike_c...@hotmail.com

Hi

I don't recall any failed authentications following CWA. What is the failed 
message about?

Regards,
--
Piotr KaluznyCCIE #25665 (Security), CCSP, CCNP
Sr. Technical Instructor - IPexpert, Inc.
URL: http://www.IPexpert.com


***Want to win a free iPad mini? Just follow us on Twitter or "Like" our 
Facebook page and be entered into a weekly drawing!



On Wed, Nov 6, 2013 at 2:58 AM, Mike Rojas <mike_c...@hotmail.com> wrote:




Hi; 

I did the CWA for the wireless client and everything worked fine. The only 
thing weird is that I am seeing like 3 or 4 authentication successful and then 
a fail, but the CoA is being done correctly and the client is being re-assinged 
to the correct VLAN. 


Has anybody run into this behavior? Is it normal? 

Thanks! 

Mike. 
                                          

_______________________________________________

For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com



Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

                                                                                
  

_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com                                         
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to