topic ISE CWA Time Profiles in Network Access Control

ISE CWA Time Profiles

Kasper Roholt — Mon, 11 Mar 2019 02:32:25 GMT

Trying to make ISE CWA with WLC2500 to work according to guest time profiles.

- When suspend guest users in ISE they still can connect and it seems that there is no communications between WLC and ISE (i suspect that ISE will communicate to WLC regarding this)

- Then creating a guest user with "OnlyFirstLogin".... the user is still connected after shutdown/restart..

I'm aware of the WLC timeout settings, but not sure if there are in play with CWA

Any who knows about these time profiles in ISE regards to WLC

Thx

Kasper

ISE CWA Time Profiles

Tarik Admani — Wed, 12 Sep 2012 19:29:55 GMT

Hi,

Are you authorizing users based on MAB by any chance so if they are profiled their endpoint is going through the mac filtering database?

Can you check and see if the mac address entry is coming up in the reports?

Thanks,

Tarik Admani
*Please rate helpful posts*

ISE CWA Time Profiles

vikasyad — Fri, 31 May 2013 23:37:29 GMT

Please review the below links which might be helpful:

http://www.cisco.com/en/US/docs/solutions/Enterprise/Borderless_Networks/Smart_Business_Architecture/February2012/SBA_Ent_BN_BYOD-GuestWirelessAccessDeploymentGuide-February2012.pdf

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html

http://www.cisco.com/en/US/docs/security/ise/1.0.4/user_guide/ise10_guest_pol.pdf