topic Re: Guest portal ISE can not see in Network Access Control

Guest portal ISE can not see

athan1234 — Wed, 11 Oct 2023 12:28:47 GMT

I fail to comprehend this. The option portal guest is not visible to me in ISE.

Everything pointed to the reason why my customer's wildcard certificate guest portal had expired; as a result, I loaded the wildcard certificate, and now my customer cannot access the portal. The more concerning issue is that I am unable to view the guest opcion portal in ise

I have saw .the node is how standalone:

Will the guest port function if I make this node primary? How did the guest portal function before ?
I remembered there were two nodes, one of which I believe was erased?This will have to be the main node

Re: Guest portal ISE can not see

Ambuj M — Wed, 11 Oct 2023 12:23:14 GMT

what version, patch, platform ? was it visible with same login account before installing wildcard cert ? if you haven’t already try different browser as well as incognito mode.

Re: Guest portal ISE can not see

ahollifield — Wed, 11 Oct 2023 12:39:10 GMT

Does this deployment only have Device Administration licensing? And not Essentials?

Re: Guest portal ISE can not see

athan1234 — Wed, 11 Oct 2023 12:46:08 GMT

How did the guest portal function before 5 minutes ago befor to implement the wildcard certificate ?
I remembered there were two nodes, one of which I believe was erased?This will have to be the main node

Re: Guest portal ISE can not see

ahollifield — Wed, 11 Oct 2023 12:55:57 GMT

Why was one node erased? Maybe try re-registering with the licensing portal? Note based on that screenshot, ISE hasn't been able to talk to the Smart Licensing Portal since December of 2022..... So your license entitlement/grace period has expired and you are experiencing enforcement for licensing compliance.

Re: Guest portal ISE can not see

athan1234 — Wed, 11 Oct 2023 13:08:59 GMT

The corporation opted to leave just one node a year ago, however it appears that this node is should be the primary node. .

How can I register myself again on the portal?

How did it function the guest portal before i replaced the wildcard certificate with a new one to replace the old one that had expired?

Re: Guest portal ISE can not see

ahollifield — Wed, 11 Oct 2023 13:20:28 GMT

Just one node? What about redundancy?

https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/admin_guide/b_ise_admin_3_2/b_ISE_admin_32_licensing.html

Service restart is my guess. What version and patch?

Re: Guest portal ISE can not see

athan1234 — Wed, 11 Oct 2023 13:24:45 GMT

Yes, I am aware there is no redundancy

Do you believe that after resting the server , I will see the licenses properly and the portal visitor?

I attach you the path

Personas:
Administration, Monitoring, Policy Service (SESSION,PROFILER)
Role:
STANDALONE
System Time:
Oct 11 2023 01:21:48 PM UTC
FIPS Mode:
Disabled
Version:
3.1.0.518
Patch Information:
3,5

Re: Guest portal ISE can not see

ahollifield — Wed, 11 Oct 2023 13:37:22 GMT

No, restart will not help. You need to re-register the deployment with the smart account. And ensure you have proper Licenses in that smart account.

Re: Guest portal ISE can not see

athan1234 — Wed, 11 Oct 2023 13:58:19 GMT

Clarify it for me.
Why did the portal guest continue to function and when I renewed the employee certificate it dosent work ?
Did you think I'd have the same portal settings when I reregistered the smart licenses?

Re: Guest portal ISE can not see

ahollifield — Wed, 11 Oct 2023 14:04:15 GMT

I'm just guessing here but did replacing this certificate cause the ISE services to restart? This would have caused a re-evaluation of the licenses (although this should have already happened since ISE hasn't been able to connect since 2022). Either way, the only fix is to fix your licensing issues.

Yes, all of the configuration and database is still there. You are just blocked from accessing those portions of the GUI when you do not have valid licensing.

Re: Guest portal ISE can not see

athan1234 — Wed, 11 Oct 2023 14:30:36 GMT

It is possible .

So In this instance, when the licenses for Essentials expire, you won't be able to access the option for the guest portal on the dashboard.

Re: Guest portal ISE can not see

ahollifield — Wed, 11 Oct 2023 14:39:43 GMT

Correct. Guest requires Essentials.

Re: Guest portal ISE can not see

athan1234 — Wed, 11 Oct 2023 15:58:51 GMT

Thank you for your quick assistance. @ahollifield

Re: Guest portal ISE can not see

athan1234 — Tue, 17 Oct 2023 07:51:11 GMT

Hello once more

The issue now is how to pass the Cisco ISE licenses after receiving the license for Cisco Smart premier licenses

How is the proccess to get the premier licenses on cisco ISE

Re: Guest portal ISE can not see

ahollifield — Fri, 13 Oct 2023 14:00:53 GMT

https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/admin_guide/b_ise_admin_3_2/b_ISE_admin_32_licensing.html

Re: Guest portal ISE can not see

athan1234 — Tue, 17 Oct 2023 07:50:04 GMT

you, however I'm doing something wrong .The first step i made was click om deregister Then I generated a token and enter the user name and token, I believe I am doing something incorrectly.

I created a new tokenI put on ise the token was genereted

I'm now keeping an eye on several aspects of the smart account licenses.

Prior to this change, I could see the essential licenses, but now I can only see the premier licenses.

I can see the substation and action.

Re: Guest portal ISE can not see

ahollifield — Sun, 15 Oct 2023 15:25:17 GMT

So can ISE reach the smart licensing portal? DNS? Is a firewall blocking?

Re: Guest portal ISE can not see

athan1234 — Sun, 15 Oct 2023 15:27:13 GMT

I belive i am doing something wrong 🙂

Re: Guest portal ISE can not see

Greg Gibbs — Sun, 15 Oct 2023 21:16:18 GMT

From the screenshots provided, the licensing does not appear to be the problem. It looks like only Premier licenses have been purchased, ISE is seeing sessions that require only Essentials licenses, so they are being borrowed from the Premier tier. This is working as expected.

The fact that you are only seeing the Device Administration Work Center would lead me to suspect that you are logging into the GUI with a user account that is associated with the 'TACACS+ Admin' RBAC Role. With the default settings, this role will only permit you to manage the settings related to TACACS+ (Device Admin) policy elements.

You would need to log into the system using credentials associated with the Super Admin role to have access to the full configuration. If you believe your account should have Super Admin access, try logging in with the default 'admin' account (or 'iseadmin' depending on what version of ISE you have).

If you don't have that default account password, you can reset the GUI password from the CLI using this procedure:
https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/install_guide/b_ise_installationGuide32/b_ise_InstallationGuide32_chapter_6.html#reset-disabled-password