WLC and ISE 1.1.1 guest MAC address limits

[tom_hooper]

Hi,

I am looking at implimenting a wireless hotspot and want to know if ISE 1.1.1 is able to enforce limits on the individual users (ie. Time limit, Data Limit)

These limits need to be erased at the end of the day.

I am using dynamic vlans to seperate out guests from corporate users.

ISE is in a 192.x.x.x address range and the guest vlan sits in a 10.x.x.x vlan.

Im struggeling with ISE terminating the Guest sessions and then not permitting that same user back onto the network.

[vikasyad]

Yes it can be done using the time profile option in ISE.Please review the below  links on how to configure time profiles for guest and sponsor portals.

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html

http://www.cisco.com/en/US/docs/security/ise/1.0/sponsor_guide/ise10_sponsor.html

[Venkatesh Attuluri]

Time limit can be acheived by using "time profiles" but data limit can not be acheived..you can disable a guest account from sponsor portal