I am trying to migrate from Microsoft NPS using 802.1x PEAP to Cisco ISE 802.1x PEAP for our WLC wireless clients. I see a lot of articles regrading Dynamic VLAN assignment, which we are not trying to do. We are trying to use ISE only for AAA and not for VLAN Assignment. I have ISE authenticating users correctly and authorizing them with the "PermitAccess" profile, however users are being put in VLANID 0 on the WLC? This VLAN is used by the WLC AP Management subnet.
I'm hoping this is just a simple checkbox or something that I missed on either ISE or WLC, but I cannot seem to figure out why ISE/WLC is dumping users into this VLANID0 and not into the Interface Assigned to the SSID. It is bizaree, because our NPS config we don't have to assign the VLAN in the RADIUS message.
As of now we have two SSIDs, production which still uses NPS, and "-Test" which points to Cisco ISE. Here are the WLC client info from both.
Working (NPS) "VLANID is 107":
vWLC v8.3.150* https://pastebin.com/j5jTUcrH