Ticket for one day after first logon in Cisco ISE 3.0

[shrijan]

Hello Everyone,

I need create tickets for the visitor just for one day from the First Logon. 

I was able to create the ticket but without anybody uses the ticket after 24 hours those tickets disappeared.

So since i have selected From First Logon, until no one has logon the ticket should be active, isn't it?

Any clue?

I have attached the file for the settings.

[Greg Gibbs · Accepted solution]

Correct. Per the Usage Guidelines in the Admin Guide for the 'From First Login' option:

From First Login: The account start time starts when the guest user first logs in to the guest portal, and the end time equals the specified duration time. If the guest user never logs in, the account remains in the Awaiting first login state until the account is removed by the Guest Account Purge Policy.

[shrijan]

@Greg Gibbs 

Thanks Greg.. I have unchecked the purge policy and have created new tickets for one day.. let see if tomorrow those tickets will remain.

will update you..

[shrijan]

@Greg Gibbs 

It worked perfectly.

Many Thanks to you.

Regards,

shrijan

[shrijan]

@Greg Gibbs 

Looks like i oversighted the expired under state column.

When the purge policy was checked, after the tickets are expired they used to disappear. 

Now when the purge policy is unchecked, let say the ticket is for one day, even if no-one has used the ticket, it shows the tickets are expired after one day (24 hours) but does not disappear from the portal.

So my question remain the same.

After i have created the one day ticket "From first login" and unless no one has used it, the ticket should be valid not expired, isn't it?

How to do it?

thanks.

Regards,

shrijan

[Greg Gibbs]

Can you share more information about what patch you're running, how you're creating these accounts, and a screenshot from the Sponsor portal?

I tested a similar scenario in 3.0 p3 using the following steps:

1. Created a Guest Type called 'DailyTicket' that uses the duration settings for 'From first login' and max/default 1 day.
2. Associated that GT with my Sponsor portal
3. Logged into my Sponsor portal and created 5 random accounts with the prefix 'ticket_' and using my DailyTicket Guest type.

In the Manage Accounts page, all accounts showed time left = 90 days with no expiration date listed

When I logged in with one of those accounts, I could see the expiration time updated and the time left changed to 24 hours for that account. The other accounts still showed 90 days with no expiration.

I'll have to wait for another 8 hours to see what happens after that 24 hour mark with all 5 accounts, but the expectation would be that my Active account would be expired and the others would still show no expiration date.

If that is not the result, then this would likely require a TAC case to investigate further and file a bug if necessary.

[shrijan]

Thank you for detailed info.

I am also running in 3.0 patch3.

I have attached the files for the Daily account.

Surprising, Let say i had created 50 tickets yesterday by using template. Even though, 24 hours have been passed i saw the tickets were still active. Then I used one of them which is 1wau12 as a username (you can see the attached doc for detail). Surprising i dont remember after how many minutes but i saw that user account is still active as i am using it and rest of other accounts suddenly went to expired.

Regards,

shrijan

[Greg Gibbs]

I'm not seeing the same behaviour. From my previous test, I have 4 accounts that are still showing Time Left = 90 days and no expiration date. The fifth account that I previously logged in with expired and has been deleted due to the purge policy.

There may be a caveat (or possible bug) that is triggered by something specific to your setup. I would suggest opening a TAC case to investigate further as this will likely require analysis of logs and debugs.

[shrijan]

Hi @Greg Gibbs 

Thank you for the replay once again.

One more question. On your previous screen shot i could see out of five tickets four were in "Created" state and fifth one in Active state. For me when i created the ticket it just becomes in "Active" state instantly. 

Any difference or any changes i need make. Because the way your tickets make more sense to me.

Thanks

Regards,

Shrijan

[Greg Gibbs]

I did nothing outside of the steps I outlined in my earlier post. If you have confirmed that your Guest Type is using the 'From first login' setting, that Guest Type is associated with your Sponsor Portal, and you are selecting that Guest Type when creating your Random guest accounts, you should see the same behaviour.

If you are following those steps and seeing a different behaviour, you will likely need to open a TAC case to investigate.

Please note that my 3.0 p3 instance is a clean install. If you have upgraded from an earlier version, there could be some caveat or bug carried over from an earlier version.

[shrijan]

Hi @Greg Gibbs 

Thank you for all the effort and simple explanations.

There were very helpful.

Appreciated.

Regards,

shrijan