Deployment Guide

The Authorization Policy will include three profiles: the Redirection Profile, an Allow Profile, and a
Deny Profile.
Note
The Allow Role will take eect once the user has been successfully authenticated to the
network. From the clients list on Extreme Campus Controller, you can view the client that
authenticated the network. The Allow Role is listed in the Role column.
3. The Authorization Profile generates the following attribute details:
• The redirection policy role.
• The redirection URL.
Related Topics
CWA with ISE Deployment on page 121
CWA with ExtremeControl Deployment on page 136
CWA with ISE Deployment
This section outlines the configuration settings for Centralized Web Authentication (CWA) integration
with Cisco ISE captive portal server.
Related Topics
Configure AAA Policy — ISE on page 121
CWA Network Settings — ISE on page 127
CWA Policy Redirection Role — ISE on page 130
Configure Authorization Policy on Cisco® ISE Server on page 132
Configure AAA Policy — ISE
You can create a AAA Policy that can be referenced through a WLAN Service, bypassing the local
Network Access Control on Extreme Campus Controller.
Note
AAA Policy can only be configured for WLAN networks requiring MACAUTH, External Captive
Portal, or EAP.
To configure a AAA network policy:
1. Go to Configure > Networks > WLANs and select a network.
AAA Policy is displayed for WLAN Networks that require authentication or authorization. The value
Local Onboarding refers to RADIUS requests that are directed through the Extreme Campus
Controller. Local Onboarding is the default value for WLAN Networks configured for Internal Captive
Portal.
Deploying Centralized Web Authentication
CWA with ISE Deployment
Extreme Campus Controller Deployment Guide for version 5.46.03 121