How to prevent guest mac address to register in ISE as guest endpoint

[pabloayalas]

Hello,

I have a specific use case I'd like to verify is feasible. We are installing wireless sensors that will perform synthetic tests. These sensors will connect to all accessible access points. For example, WS-1 (Wireless Sensor) can see AP-1, AP-2, and AP-3. The sensor will connect to AP-1 on the 2.4GHz band, authenticate through the splash page (self-registration portal), and run multiple tests (including Speedtest). After completing the tests, WS-1 will disconnect from AP-1 (2.4 GHz) and switch to AP-2, repeating the same process. Once done, it will try with AP-3. After completing these tests, WS-1 will perform the same procedures on the 5GHz band and finally on the 6GHz band. The issue we will encounter is that ISE will register the MAC address of the access point and store it as a guest endpoint. Even though we have a 1-day purge policy, during the day, the sensor will only display the splash page. Is it possible to prevent ISE from storing the MAC address of any wireless sensor to prevent this issue? I want to treat all these sensors as brand new guests every time they try to connect. 

Thanks

[Arne Bier]

Can your sensor trigger any external API calls? e.g. if it could make a CURL (REST API) request to ISE, you could delete the MAC address from ISE after the sensor has completed its test sequence. Other than that, the only internal ISE function I know of is the purge, which will be too slow for your use case. Alternatively, if your sensors execute their tests on a scheduled time, you could run the API call from any external system (e.g. a linux cron job to run few minutes after test cycle) to clear MAC addresses with a simple CURL command.