Lab Minutes Forum

Technical Discussion => Wireless => Topic started by: egonzale on January 09, 2015, 12:01:31 PM

Title: Apple Devices/ISE authentication
Post by: egonzale on January 09, 2015, 12:01:31 PM
we have macbook computers in our company when we connect then to the network (wire) they authenticate with AD and they can browse internal websites and lunch some applications but when is wireless connected the AD authentication works but they can not connect to the internal websites or lunch applications. somebody told us that we need to use an Apple Server to redirect all the AD credentials and authorization in ISE? I'm not really sure how all this work. does anybody has any idea or a workaround on this.
thanks.
Title: Re: Apple Devices/ISE authentication
Post by: MC on January 10, 2015, 08:52:37 PM
I am not aware of any Apple server that you need. What type of wireless controller are you using? Once the client connects to wireless,
1. Did the client get an IP?
2. Does WLC apply the correct ACL to the session?
Title: Re: Apple Devices/ISE authentication
Post by: egonzale on January 12, 2015, 12:50:41 PM
we have a 5508 WLC, when the MACs connect to the wireless they get an ip and are able to surf the web, but they are no able to log in in to internal websites. they only can access to internal websites when they are wire connected. It might be just the ACLs that are not been apply to the correct session. what about the Golden triangle? AD and OD will this have to do anything with the macs not getting the right authorization when they are wireless connected? thats the only thing I can think of when somebody told us that we have to use a Apple server.

Thanks, 
Title: Re: Apple Devices/ISE authentication
Post by: MC on January 13, 2015, 09:27:46 PM
It does sound like an ACL issue. Do you have Windows client you can test with? If you get the same result, then most likely it's the issue on WLC or ISE. The only Apple server I know of is for wireless profile deployment which is nothing to do with the problem you are having.
SimplePortal 2.3.7 © 2008-2024, SimplePortal