Trouble Authenticating Cisco 4402 Wireless Controller to ISE

Hoping to authenticate wireless users to the Cisco ISE. Controller is 4402, with the latest software update. Any advice other than buying new controllers?
M AdamsData Center Solutions EngineerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Craig BeckCommented:
If you want to use CWA Guest portal, for example, you're out of luck.  You can, however, integrate the 4400 with an ISE as a pure RADIUS server.  CoA is supported with 7.0.116.0 and later versions of code.

This means you won't be able to use the centralized guest portal for guest logins.  You'd be stuck to using the local web-auth feature and backing off to RADIUS for authentication.
M AdamsData Center Solutions EngineerAuthor Commented:
ason is

We have now installed a 5500 series controller. I'm trying to authenticate to the ISE, but am getting rejected due to CHAP not allowed. Configured to allow CHAP under the Policy Elements, but still getting same rejection "CHAP not allowed"
Craig BeckCommented:
Connecting as a client or to the management interface?
Defend Against the Q2 Top Security Threats

Were you aware that overall malware worldwide was down a surprising 42% from Q1'18? Every quarter, the WatchGuard Threat Lab releases an Internet Security Report that analyzes the top threat trends impacting companies worldwide. Learn more by viewing our on-demand webinar today!

M AdamsData Center Solutions EngineerAuthor Commented:
Connecting as a guest/client. After some tweaking and reviewing logs, I finally have it authenticating. Thanks for the suggestions...

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
M AdamsData Center Solutions EngineerAuthor Commented:
Continual log review and focused on those particular areas
M AdamsData Center Solutions EngineerAuthor Commented:
Now able to connect to Guest Wireless, after authenticating through the Cisco ISE appliance. But, once i receive the "you are now connected to the internet" message, I'm unable to load the pages, on any site. The same subnet cureently works for users connected via ethernet, but not for wireless
Craig BeckCommented:
Are you giving a DNS server address to wireless clients?

Can you ping anything on the internet by IP?
M AdamsData Center Solutions EngineerAuthor Commented:
I cannot ping via ip nor name
Craig BeckCommented:
So can you do a traceroute to something on the internet?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Wireless Networking

From novice to tech pro — start learning today.