MAC Assignment for Guest User Identity Groups

paul — Tue, 19 Dec 2017 21:56:08 GMT

I know when I create Guest Types I can control what Endpoint Identity Group the MACs get assigned to when the guest goes through the portal process, but what I don't know is how to control the Endpoint Identity Group the MAC gets assigned to when I use the shadow user identity group that gets created for each Guest Type.

So I created an Endpoint Identity Group called Temp. I created a Guest Type called Temp and mapped it to the Temp Endpoint Identity Group. If I create a sponsored guest account assigned to Temp guest type and user signs in the MAC address gets assigned to the Temp Endpoint Identity Group. All working as normal.

Now I create a local ISE user and assign it to the Temp user identity group (the shadow group created when I created the guest type). When I sign into the guest portal using the local ISE user the MAC gets assigned to the GuestEndpoints identity group. I don't see a way to choose a different group.

Am I missing something?

Re: MAC Assignment for Guest User Identity Groups

Jason Kunst — Tue, 19 Dec 2017 22:49:06 GMT

Yes internal accounts or those outside of the guest database are not considered guests but instead considered employees

They use the endpoint group assigned under the portal settings for employees, this is restricted to one endpoint group per portal

topic Re: MAC Assignment for Guest User Identity Groups in Network Access Control

MAC Assignment for Guest User Identity Groups

Re: MAC Assignment for Guest User Identity Groups