cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2853
Views
0
Helpful
5
Replies

Need to hide some part of the ISE guest portal

REJR77
Level 1
Level 1

Hello,

I would like to use the Guest Portal not to authenticate user but more show them that something was wrong with authentication or to advise users that they are not alowed to connect to the network.

I have a look at the How To: ISE Web Portal Customization Options, but can't find my way.

The idea is to remove the yellow part (with css? with javascript? other?)

Image 1.png

Thanks for the help (not a dev guy :))

1 Accepted Solution

Accepted Solutions

The ISE portals are not built for this type of 'dead-end' notification. You can, however, create a basic HTML page, upload it to ISE and redirect the users to this page as a result of the authorisation conditions.

See this document for an example on how to use these custom files. It's a different use case, but the process is still relevant.

Guest Hotspot with max 2 hours network access per day 

View solution in original post

5 Replies 5

If you use the portal-type "Hotspot", there will be no login-fields.

Hi,

Yes but in this case I would need to suppress the Accept or Decline button

The ISE portals are not built for this type of 'dead-end' notification. You can, however, create a basic HTML page, upload it to ISE and redirect the users to this page as a result of the authorisation conditions.

See this document for an example on how to use these custom files. It's a different use case, but the process is still relevant.

Guest Hotspot with max 2 hours network access per day 

Hi Greg,

Thanks for the tips.

Do you know if it is possible to access the file through every interface of the PSN (in the case we have several interfce on ISE) ?

 

I also found this link very useful https://community.cisco.com/t5/network-access-control/support-information-button-in-place-of-link/m-p/3492125

 

Thanks

The custom file is not tied to a specific port, so you technically could probably access it from any interface but I haven't tried it. This is a URL redirect flow though so, similar to your guest portal flows, ideally the URL sent by ISE should be using the same interface you are using for the Guest portal (on port 8443).