cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1991
Views
0
Helpful
2
Replies

Change Account Duration for ISE Guest User can not more than 5 days

andikamulya
Level 1
Level 1

Extending guest account duration can not more than 5 days.

On portal we can change it to more than 5 days, but the account always expired after next 5 days.

Email notfication sent after change duration also said the account only have 5 days of duration.

I'm using ISE 1.2 patch 2.

2 Replies 2

blenka
Level 3
Level 3

Step 1 From the Cisco ISE Administrator interface, choose Administration > Guest Management > Settings > General > Purge.

The Purge Settings page is displayed.

Step 2 To schedule a purge operation, check the Enable purge settings for expired guest accounts check box.

Step 3 Configure the following available options:

a. Enter the purge interval, in number of days. Valid range is 1-365.

b. Specify the hour of the day when the purge should occur.

Date of last purge displays the date and time when the last purge operation occurred.

Date of next purge displays the date and time when the next purge operation is scheduled to occur.

Step 4 To immediately execute a purge of expired guest user records, click Purge Now.

This executes a purge manually even if Enable purge check box is not checked. This option provides you the freedom to purge records whenever you seem fit.

Step 5 Click Save

Please check the point 3 find the value is so that it may engaged.

Venkatesh Attuluri
Cisco Employee
Cisco Employee
check CSCup72664
 
Symptom:
On ISE 1.2, guest users are removed before meeting the the time profile set because the time profile is changed to 1 day even though the sponsor user has a maximum duration time set to 90 days or greater.

Conditions:
ISE 1.2 guest users created with a time profile of greater than 1 week.

Workaround:
Manually syncing the policy nodes will clear out these issues.