Question

A network engineer is configuring 802.1X wireless access on a Cisco WLC that will authenticate users against Cisco ISE. During testing, users authenticate successfully, but when ISE later needs to quarantine an infected endpoint, the WLC never applies the new authorization and the session remains active. Which configuration change on the WLC is required to resolve this issue?

Accepted Answer

Enable RADIUS Change of Authorization (CoA) support on the RADIUS server entry used for authentication

Answer

Increase the RADIUS accounting interim update interval to send session data more frequently

Answer

Change the Layer 2 security from WPA2 Enterprise to WPA2 Personal on the WLAN

Answer

Configure the WLC to use RADIUS server fallback to a secondary ISE PSN