cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

456
Views
0
Helpful
2
Replies
tom_hooper
Beginner

WLC and ISE 1.1.1 guest MAC address limits

Hi,

I am looking at implimenting a wireless hotspot and want to know if ISE 1.1.1 is able to enforce limits on the individual users (ie. Time limit, Data Limit)

These limits need to be erased at the end of the day.

I am using dynamic vlans to seperate out guests from corporate users.

ISE is in a 192.x.x.x address range and the guest vlan sits in a 10.x.x.x vlan.

Im struggeling with ISE terminating the Guest sessions and then not permitting that same user back onto the network.

2 REPLIES 2
vikasyad
Beginner

Yes it can be done using the time profile option in ISE.Please review the below  links on how to configure time profiles for guest and sponsor portals.

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html

http://www.cisco.com/en/US/docs/security/ise/1.0/sponsor_guide/ise10_sponsor.html

Venkatesh Attuluri
Cisco Employee

Time limit can be acheived by using "time profiles" but data limit can not be acheived..you can disable a guest account from sponsor portal

Create
Recognize Your Peers
Content for Community-Ad

ISE Webinars


Miss a previous ISE webinar?
Never miss one again!

CiscoISE on YouTube