ISE CWA Time Profiles

[Kasper Roholt]

Hi

Trying to make ISE CWA with WLC2500 to work according to guest time profiles.

- When suspend guest users in ISE they still can connect and it seems that there is no communications between WLC and ISE (i suspect that ISE will communicate to WLC regarding this)

- Then creating a guest user with "OnlyFirstLogin".... the user is still connected after shutdown/restart..

I'm aware of the WLC timeout settings, but not sure if there are in play with CWA

Any who knows about these time profiles in ISE regards to WLC

Thx

Kasper

[Tarik Admani]

Hi,

Are you authorizing users based on MAB by any chance so if they are profiled their endpoint is going through the mac filtering database?

Can you check and see if the mac address entry is coming up in the reports?

Thanks,

Tarik Admani
*Please rate helpful posts*

[vikasyad]

Please review the below links which might be helpful:

http://www.cisco.com/en/US/docs/solutions/Enterprise/Borderless_Networks/Smart_Business_Architecture/February2012/SBA_Ent_BN_BYOD-GuestWirelessAccessDeploymentGuide-February2012.pdf

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html

http://www.cisco.com/en/US/docs/security/ise/1.0.4/user_guide/ise10_guest_pol.pdf