cisco ise problem with sms account guest

[welmjendel]

hi guys,

I'am setting up a cisco ise (VM v 2.1 ) and here is what I want to do:

Guest access via self registration portal: The guest provides credentials and then receives an SMS containing an automatically generated password.

My problem is the following:

- the account stays at a "created state" and the guest does not get the SMS with the password within.

- When I force the registration and manually put the password generated, I get access and the account state becomes "Active" ??? and when I try resending the SMS, I get it instantaneously.

Any idea please ?

Regards

[Rahul Govindan]

What SMS gateway are you using to send the SMS? You may want to apply a TCP DUMP on ISE with filter as SMS gateway ip address to see if the ISE sends the SMS request the first time or not.

[welmjendel]

Hi Rahul, thanks for the reply.

I am using an SMS HTTP API ( please take a look at the screenshot), as long as I the account is in an "actif" state the ISE sends an sms, otherwise ( state created), the ise does not.

Thanks =)

[Rahul Govindan]

Ah ok. Makes sense now. I have seen this issue when there is a difference in timezone. Guest accounts may not be active as the location chosen was different from where they actually are. So if they choose SanJose (default timezone) , the clock starts from that time in San Jose timezone, which may be later than the timezone they are in. Do you have a different timezone in your case?

Another reason that the Guest may not be active is when the setting under Guest type says to activate on first login. This should ideally be set to activate at time of self-registration.

[welmjendel]

I have already set the right location, to where I am located with the right time zone.

I have also set, as you mentionned, the guest type to be activated at time of self-registration, the result is still the same, eventhough I double checked every parameter.

Could you please recall any other possible reason, It's kind of urgent !!

I really appreciate it Rahul, thanks.

Fedi

[Rahul Govindan]

The only other thing I can think of was a bug where the timezones created for new locations were swapped. Like GMT+1 was actually created as GMT-1. etc. I can't find the bug details in my notes but I know it was present in ISE 2.1.

Considering your urgency, I would recommend opening a TAC case and have them look at this issue. You seem to have done everything correct from what you have mentioned.

[welmjendel]

OK I will see what I can do.

Thanks again you've been very helpful.

[eric.moore@vertico.com]

hello was you able to get a resolution to this?