topic Re: Maximum Concurrent User Sessions with PEAP and redirect to portal in Network Access Control

Maximum Concurrent User Sessions with PEAP and redirect to portal

piotrPaszk — Sun, 19 Apr 2020 12:16:16 GMT

Hi,

One of my customers is using PEAP ( AD credentials) for the devices brought to work by the employees. He has recently realised that some users are giving away its AD credentials so we see a hudge amount of devices belonging to some of the users. I took a look at the Maximum Concurrent User Sessions option but I see there no besically option to map external identity groups, only internal ( wonder why ?). In this case I can turn on the function globally and set it up to 2 sessions per user for all. But I do want to notify the users about Maximum Concurrent User Sessions beeing exided in some way. Preferably to get users som kind of pop-up or web page which will notify them.

Is this possible with ISE ?

Best regards,

Piotr Paszkowski

Re: Maximum Concurrent User Sessions with PEAP and redirect to portal

balaji.bandi — Sun, 19 Apr 2020 15:01:25 GMT

how the user authenticating use Potal ?

here is some reference :

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-22/204463-Configure-Maximum-Concurrent-User-Sessio.html

Re: Maximum Concurrent User Sessions with PEAP and redirect to portal

piotrPaszk — Sun, 19 Apr 2020 17:13:02 GMT

Hi,

Thanks for the answer 🙂 I did not get you question though ?

The users have authz policy which says user uses PEAP and exernal identity group AD: XXXX than result XXXX. I want to add this: Network Access·SessionLimitExceeded and if this is true then result: ( access deny due to limit exeeded) and then redirect to a info page or portal ?

Is it possible only with guest access or redirect can be used with PEAP ?

Piotr

Re: Maximum Concurrent User Sessions with PEAP and redirect to portal

phyowaitun — Thu, 15 Jul 2021 08:30:24 GMT

Hi,

I am using 802.1x EAP for wireless. I followed the reference of this link.

Still ISE is not restricting concurrent sessions for External Identity Group ( Active Directory ).