different between Maximum simultaneous logins and Maximum device

[seanxiao]

greetings guys,

we want to restrict the guest login. We tested that the Maximum devices that can be connected from guest is controlled by Maximum devices guests can register configured in guest type in ISE. Let's say, user account testabc, I use it to  sign onto the guest portal on device A (laptop), then on device B (laptop), both are good. The sign-on attempt on device C (laptop) will show the warning saying You have added the maximum number of supported device, the first device you logged in with will be deleted so you can add the new device. If I continue, the first login on device A will be deleted.

but, what is the purpose of value set in Maximum simultaneous logins? where does it affect? what is the difference compared with Maximum devices guests can register?

Thanks for the advice,

Sean

[M02@rt37 · Accepted solution]

Hello @seanxiao 

The "Maximum devices guests can register" setting in ISE controls how many different devices a guest user can associate with their account. Once this limit is reached, if they try to connect a new device, they must remove an existing one, as you observed in your test... This setting track the MAC addresses of registered guest devices.

On the other hand, "Maximum simultaneous logins" determines how many of those registered devices can be actively logged in at the same time. Even if a guest has multiple registered devices, they can only be logged in from the number of devices allowed by this setting at any given time. If this limit is set to 1, logging in on a second device will log out the first session but won’t remove the device from the registered list. For example, if the maximum registered devices is set to 3 and maximum simultaneous logins is set to 2, the guest can register up to three devices, but only two of them can be logged in simultaneously. If they attempt to log in from a third device, one of the active sessions will be logged out, but the device remains registered.

[seanxiao]

thanks for the great support.

so it is better that we set the same value for both fields? So that it allows the same number of allowed connected device and simultaneous login.

[M02@rt37 · Accepted solution]

@seanxiao 

Yes, it's better to set the same value for both options. Users can register and use the same number of devices simultaneously without unexpected disconnections. For example, if both values are set to 2, a guest can register and stay logged in on two devices at the same time. If they attempt to log in on a third device, they will be prompted to remove one of the existing ones. If your goal is simple and controlled guest access, setting both values the same ensures smooth operation and avoids confusion.