cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4364
Views
7
Helpful
7
Replies

Export Guest Account Database

umahar
Cisco Employee
Cisco Employee

A customer of mine is moving from one ISE cluster to another ISE cluster but has about 500 active guest endpoints.

Is it possible to export guest accounts from existing ISE and import them to new ISE

2 Accepted Solutions

Accepted Solutions

Jason Kunst
Cisco Employee
Cisco Employee

No. Passwords are encrypted and there is no mechanism. Please bring this up to ISE product management

Customer can point to old ISE as a radius server

View solution in original post

did you check out this post? https://community.cisco.com/t5/security-documents/ise-guest-amp-web-authentication/ta-p/3657224#toc-hId-739235510
I'd recommend just keeping the old system online.

 

please provide http://cs.co/ise-feedback to have export/import of guest accounts brought back

View solution in original post

7 Replies 7

Jason Kunst
Cisco Employee
Cisco Employee

No. Passwords are encrypted and there is no mechanism. Please bring this up to ISE product management

Customer can point to old ISE as a radius server

I have had several customers ask for this capability as well - export guest database to import into new system or different ISE version.

Is there a feature request for this capability that we can attach customers needing this?

Thanks

I am looking at this guide.

ISE Guest Sponsor API Tips & Tricks

Should GET /ers/config/guestuser/f4705ee2-748b-11e6-9e5e-000c2958a9f6

get you the username and password.

Maybe we can write a utility which transfers these accounts from old ISE to new ISE.

hslai
Cisco Employee
Cisco Employee

If a guest changes the password after the account created, then the sponsor would not have permission to see it, even through ERS.

gbekmezi-DD
Level 5
Level 5

Can you do a backup and recovery?

Any update on this?

I'm facing the same scenario and I've to migrate at least 250 active guest endpoints from old ISE cluster to new one.


With that API could we force a reset of guest password before importing them?

Quello che non ho è quel che non mi manca.

did you check out this post? https://community.cisco.com/t5/security-documents/ise-guest-amp-web-authentication/ta-p/3657224#toc-hId-739235510
I'd recommend just keeping the old system online.

 

please provide http://cs.co/ise-feedback to have export/import of guest accounts brought back