Cisco ISE Guest Portal Access

[mikiNet]

Hello,

I have ISE 3.1 with patch4 installed. I implement Guest Portal access for guests who visiting our company. Guest Portal is manage by Sponsors - They must create password and give it to Guest, then Guest has access to network (only Internet). Everythink working good but after 10 minute Guest report me that connection is termination. This situation happen always, after 10 min guest is logout out from guest network... I don't see any configuration with set time to 10min... 

Any idea ? Where is problem ?

[balaji.bandi]

chcek on ISE Logs what is the reason of termination connection, where that is coming from user ? Wireless ?

[ammahend]

Agree with Balaji, considering time of 10 minutes, by default DCA runs every 10 minutes if not set properly, so you might want to check that also, I had similar issue with a customer once where users will disconnect every 10 minutes.

is this happening with just guest or all SSIDs ? is it happening with all guest or some guests only ?

[mikiNet]

Yes, this happening with just guest user - only on this SSID and it happen with all guest - how you set DCA to work properly ? 

Cisco ISE Live logs not showing any problem, I only see REDIRECTION to CWA portal and Permit Access. That's all.

[balaji.bandi]

I am sure ISE get logs what is the reason of termination connection.

not sure what WLC controller below config give example : DCA :

https://mrncciew.com/2013/03/16/configuring-dca/

also check session timeout in WLAN Advanced config, anything changed :

Other options create a test environment and run debug see the reason of disconnection.

[hslai]

@mikiNet Once a guest device completes authentication and authorized to access Internet, ISE is not really involved unless any CoA or accounting events. I would suggest debugging on the WLC with some command like (if Cisco 9800-WLC)

debug wireless mac <>

 Or, similar.

[mikiNet · Accepted solution]

Ok, I have a solution. I disable this option on WLC:

Uncheck "Enable Session Timeout" - then all works good.

[balaji.bandi]

Glad you able to fix the issue, that was my suggestion before.