Manually modifying guest account on ISE integrated with WLC

[bberry]

Ok, I have an odd question. We have ISE integrated with our WLC using the sponsor and guest redirect portals and it is all working great. The sponsors can pick from three time profiles as to how long they want the accounts to last. We have a default 8 hours and have added a two day and three day time-frame as well. I am now looking for a way to have a "custom" type guest account where either the admin or possibly certain users and create a different time to expire for the guest account. Basically a way to create a guest account that say has a 6 month expiration on our guest SSID. This could be either a way to modify a guest account created by the sponsor or possibly have our help desk custom create the guest account with the extended expiration date. Going through the sponsor portal I only have those time profiles created and associated with the sponsor accounts and so far have seen no where where I can manually modify the account expiration date on an account created through the sponsor process. Any thoughts or suggestions?? 

Brent

[Saurav Lodh · Accepted solution]

Time profiles provide a way to give different levels of time access to different guest accounts. Sponsors must assign a time profile to a guest when creating an account, but they cannot make changes to the time profiles. However, you can customize them and specify which time profiles can be used by particular sponsor groups. Beginning with Cisco ISE 1.2 time profiles are referred to as the account duration in the Sponsor portal.

Cisco ISE 1.2 includes these default time profiles, which replace the profiles available previously:

• DefaultFirstLoginEight—the account is available for 8 hours starting when the guest user first successfully connects to the Guest portal. This replaces the DefaultFirstLogin time profile.
• DefaultEightHours—the account is available for 8 hours starting when sponsors first create the account. This replaces the DefaultOneHour time profile.
• DefaultStartEnd—sponsors can specify dates and times on which to start and stop network access.

If you upgrade to Cisco ISE 1.2, the older time profiles are still available, but you can delete them if you are not using them. If the older time profiles are assigned to a sponsor group, a message alerts you before deleting. If you perform a new installation of Cisco ISE 1.2, only the new time profiles display.

http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_guest_pol.html

[Venkatesh Attuluri]

we have only "change account duration" option in the sponsor portal to manually assign time to a created guest but again you need to assign a time profile the list available