topic how exactly do you configure in Network Access Control

Guest WiFi using Dot1x

evanspall — Mon, 11 Mar 2019 04:49:56 GMT

Hi all,

I have been using the Guest functionality in ISE 1.1.4 (and previous versions) for a long time now and I've always been frustrated with it. I am now in the process of setting up an alternate Guest network that uses dot1x to reference the Internal Users ID source (where all registered guests are stored) in ISE to authenticate clients.

It seems to work perfectly for any activated guests, but any newly created account gets the following...

RADIUS Status:

Authentication failed : 24206 User disabled

Is there any way to circumnavigate the activation through the use of the CWP and thus make it possible for newly registered guests authenticate using dot1x?

Will changing the Guest Portal Policy Configuration (Not Used/First Logon/Every Logon) or Authentication Type (Guest/CWA/Both) solve this? Weary of changing it on the fly in production environment.

Thanks

Message CodeMessage

mohanak — Thu, 26 Jun 2014 17:19:52 GMT

Message Code

Message Class

Message Text

Message Description

Severity

24206

Local-user-DB

User disabled

User marked disabled in Internal database.

Info

http://www.cisco.com/c/en/us

Saurav Lodh — Fri, 27 Jun 2014 08:33:44 GMT

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/115802-radius-authentication-00.html

Set the guests to be created

jan.nielsen — Sat, 28 Jun 2014 21:06:09 GMT

Set the guests to be created in the activatedguests group instead of the regular "guests" group and they should be usable right after they are created

how exactly do you configure

evanspall — Mon, 30 Jun 2014 00:00:06 GMT

how exactly do you configure that?

Ah perfect.Thanks a lot.

evanspall — Mon, 30 Jun 2014 00:18:34 GMT

Ah perfect.

Thanks a lot.

Nevermind.Answered in the

evanspall — Mon, 30 Jun 2014 00:19:01 GMT

Nevermind.

Answered in the article salodh linked