topic Re: Guestusers configured to bypass guest portal fail with msg userdisabled - CSCva84435 in Network Access Control

Guestusers configured to bypass guest portal fail with msg userdisabled - CSCva84435

Gagandeep Singh — Thu, 05 Apr 2018 20:59:18 GMT

Hi Team,

Customer has a query if this bug has been fixed in any release or patch on ISE.

Seen several requests on this bug and it turned out to be mis-configuration.

To avoid hitting the error, the customers need to enable "guest portal bypass". Customer doesn't want to enable because need AUP page.

Customer using secure SSID with hotspot portal. Need to use a secured SSID, so guests enter their credentials on their device to get onto the SSID, then are redirected to an AUP page before being granted full access. It was all working fine on 1.4 prior upgrading to 2.2

Looking for fix of the bug.

Any help would be appreciated.

Regards

Gagan

Re: Guestusers configured to bypass guest portal fail with msg userdisabled - CSCva84435

paul — Thu, 05 Apr 2018 22:20:01 GMT

What isn't working in 2.2? There are no guest users in a Hotspot portal. The sole purpose of the hotspot portal is to present AUP.

Re: Guestusers configured to bypass guest portal fail with msg userdisabled - CSCva84435

Gagandeep Singh — Thu, 05 Apr 2018 22:49:15 GMT

Thanks for the reply.

Setup used to work in 1.4. Since upgrade to 2.2 stopped working.

Try to authenticate with guest credential using dot1x (will fail)

I found a Junked bug

CSCvg89759 Guest user Suspend-Reinstate Allows to bypass Guest portal

tac-repro from bug:

Configure one user type not to have "Allow guest user to bypass portal" (disabled by default)

Create user of said user type

Try to authenticate with guest credential using dot1x (will fail)

On sponsor portal - suspend and re-instate user.

Authenticate with this user again - will succeed.

Not sure if this bug has been fixed or not in some release. Customer doesn't want to apply the workaround.

Regards

Gagan

Re: Guestusers configured to bypass guest portal fail with msg userdisabled - CSCva84435

Jason Kunst — Thu, 05 Apr 2018 23:03:21 GMT

I would suggest you work with tac to investigate

Re: Guestusers configured to bypass guest portal fail with msg userdisabled - CSCva84435

hslai — Wed, 11 Apr 2018 04:02:07 GMT

CSCva84435 is currently not reproducible. If you are able to, please contact the engineering team directly.