09-12-2012 08:20 AM - edited 03-10-2019 07:32 PM
Hi
Trying to make ISE CWA with WLC2500 to work according to guest time profiles.
- When suspend guest users in ISE they still can connect and it seems that there is no communications between WLC and ISE (i suspect that ISE will communicate to WLC regarding this)
- Then creating a guest user with "OnlyFirstLogin".... the user is still connected after shutdown/restart..
I'm aware of the WLC timeout settings, but not sure if there are in play with CWA
Any who knows about these time profiles in ISE regards to WLC
Thx
Kasper
09-12-2012 12:29 PM
Hi,
Are you authorizing users based on MAB by any chance so if they are profiled their endpoint is going through the mac filtering database?
Can you check and see if the mac address entry is coming up in the reports?
Thanks,
Tarik Admani
*Please rate helpful posts*
05-31-2013 04:37 PM
Please review the below links which might be helpful:
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html
http://www.cisco.com/en/US/docs/security/ise/1.0.4/user_guide/ise10_guest_pol.pdf
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide