Backup SSID for ISE posture enabled SSID

[jain.nitin]

Dear All,

We are deploying ISE with posture for Wireless and wired network. All seems to be fine but one incident make us thought on backup SSID for SSID which is configured for ISE-NAC. Incident was that our ISE went down some reason and it was not reachable (We have redundant ISE but all of them went down because of some storage issue) and because of that no-one was able to connect to wireless network as we configured Anyconnect with specifying ISE enabled SSID as corp ssid so users were not able to connect to any other SSID.

Now I am thinking how can we provide a backup SSID for all users if in case any issue happens with ISE ?

For wired we have configuerd auth-fail vlan so users switched to that vlan in case ISE is not reachable for wireless I am not able to find any solution as it involves SSID, Anyconnect software both.

Please help.

[Jason Kunst · Accepted solution]

It sounds like you are using anyconnect NAM supplicant and have specified the WLANs that they can connect to? If that’s the case then the only way is to configure anyconnect with a backup ssid

[Jason Kunst]

Moving To anyconnect forum in Case you have more queries

[jain.nitin]

Yes we are using AC NAM as a supplicant for wired and wireless but there is no option to configure backup SSID in anyconnect.

[Jason Kunst]

AFAIK there is no backup SSID. You would just need to configure another primary SSID to allow them to connect to. This of course might be an issue if you don’t want them to connect to it unless there is an outage.

Would recommend you perhaps turn off backup SSID when not needed? Otherwise not sure who you expect to accomplish this?

If you’re looking for a truly backup to only use when the primary is shutdown then you would need a feature request I would believe and we don’t talk about feature or roadmaps in public forum.