Guest portal ISE can not see

[athan1234]

I fail to comprehend this. The option portal guest is not visible to me in ISE.

Everything pointed to the reason why my customer's wildcard certificate guest portal had expired; as a result, I loaded the wildcard certificate, and now my customer cannot access the portal. The more concerning issue is that I am unable to view the guest opcion portal in ise

I have saw  .the node is how  standalone:

Will the guest port function if I make this node primary? How did the guest portal function before ?
I remembered there were two nodes, one of which I believe was erased?This will have to be the main node

[ahollifield]

https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/admin_guide/b_ise_admin_3_2/b_ISE_admin_32_licensing.html

[athan1234]

 you, however I'm doing something wrong .The first step i made was click om deregister Then I generated a token and enter the user name and token, I believe I am doing something incorrectly.

I  created a new tokenI put on ise the token was genereted

I'm now keeping an eye on several aspects of the smart account licenses.

Prior to this change, I could see the essential licenses, but now I can only see the premier licenses.

I can see the substation and action.

[ahollifield]

So can ISE reach the smart licensing portal? DNS? Is a firewall blocking?

[athan1234]

I belive i am doing something wrong

[Greg Gibbs]

From the screenshots provided, the licensing does not appear to be the problem. It looks like only Premier licenses have been purchased, ISE is seeing sessions that require only Essentials licenses, so they are being borrowed from the Premier tier. This is working as expected.

The fact that you are only seeing the Device Administration Work Center would lead me to suspect that you are logging into the GUI with a user account that is associated with the 'TACACS+ Admin' RBAC Role. With the default settings, this role will only permit you to manage the settings related to TACACS+ (Device Admin) policy elements.

You would need to log into the system using credentials associated with the Super Admin role to have access to the full configuration. If you believe your account should have Super Admin access, try logging in with the default 'admin' account (or 'iseadmin' depending on what version of ISE you have).

If you don't have that default account password, you can reset the GUI password from the CLI using this procedure:
https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/install_guide/b_ise_installationGuide32/b_ise_InstallationGuide32_chapter_6.html#reset-disabled-password

[athan1234]

hi @Greg Gibbs   I'm watching right now, and I can now view all of them . It seems that when I made the licenses yesterday, it took some time for them to refresh, but now I can see everything.

[athan1234]

When I generated the token, I only set the timer for 30 days, although the license is valid until 2025. This is the only thing that worries me.The situation is problematic: I ought to be a new token and insert a two-year term.

One more thing: I'm testing the guest portal for a customer; he couldn't view the portal;

This is the result in the test

[ahollifield]

So what exactly did the client machine on the captive portal?  Failed to connect? No redirect? Certificate warning?  Something else?

[athan1234]

Hi @ahollifield  no redirect portal guest .

[ahollifield]

I would consider opening a new thread for this issue.  You will get more visibility since this discussion has already been marked as resolved.

What does your redirect ACL look like?  Can the client resolve the DNS name?  Is there a firewall blocking this traffic?  If you issue a "show ports" from the CLI of the ISE nodes do you see 8443 open?  

[athan1234]

you're right If this issue persists after restart application in ISE , I will open a new case.

[athan1234]

I read that stop and start ISE application was necessary. I'm waiting for my customers feedback after of this