cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
898
Views
0
Helpful
1
Replies

Ise 1.1 ActivatedGuest not able to authenticate using radius pap

bartbruninx
Level 4
Level 4

Hi,

I want to create guest accounts using the sponsor portal and use radius to authenticate with these accounts; Afaik this  is supported as from 1.1mr1 (Show Version output      : 1.1.1.268)

When we create an account with the ActivatedGuest Identity group, in the sponsor portal the account is marked as active.

Username Status   First Name   Last Name   Email Address

aazeaze1 ACTIVE azea azeaze

However in ise, using radius, we receive an access-reject:

24210  Looking up User in Internal Users IDStore - aazeaze1

24206  User disabled

after logging in successfully to the guest portal with this account, the radius request also succeeds.

Questions

1) is this scenario supported?

2) is there anything else that should configured?

Regards

1 Reply 1

bartbruninx
Level 4
Level 4

Hi,

FYI it works if you don't use the fromlogin time profile , that's only for LWA/CWA.

cheers