Question: Is there a way to have ISE block MAC addresses that are repeatitively connecting to the guest hotspot?
Situation: an hospital provides Guest access for patients through ISE Hotspot. The hospital doesn't want to use the self-registration or sponsor approval scenarios for patients.
Staff are instructed to connect via SSID BYOD and not to use SSID GuestNet. Most staff oblige and therefore get onboarded. However, some staff continues to connect through GuestNet which provides 1 week access to the device.
So: how can we discovered:
1. that a MAC address is, week after week, reconnected through the hotspot? is there a better way than through using the Guest Master Report?
2. is there a way to tell ISE that once an MAC address has registered 4 times (4 x 1wk = 1 month - patients rarely stay more than 1 month at this hospital) through the HotSpot that it is blacklisted for 1 week, thus forcing the staff to then go through SSID BYOD.
Thanks,
C. Paquet
