10-17-2024 03:24 AM
Hi all,
I'm encountering an unusual issue with the Guest authentication process. We have a sponsor portal where each guest registering is assigned the "Self_Guest" type.
We've configured the "Self_Guest" user type to store client MAC addresses in a specific Endpoint Identity Group (EIG) called "Guest_Group."
However, after several attempts, I noticed that the client MAC addresses are being saved in the default "Unknown" EIG rather than the "Guest_Group" EIG as intended.
Since our AuthZ policies rely on the correct EIG, this is preventing proper guest authentication.
Has anyone experienced this issue before?
Thanks
10-17-2024 04:14 AM
Personally i would not suggest MAC address using for Guest Authenticaiton.
New devices have Random MAC, then you will end up different results.
random MAC example for guest user :
https://www.ise-support.com/2020/09/20/guest-access-and-randomized-mac-addresses/
10-17-2024 04:34 AM
Why not use the GuestFlow condition instead?
10-17-2024 08:45 AM
Would you mind sharing the screenshots of how you configured the "Self_Guest" user type for review?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide