Has anyone got the configuration for ISE to limit the maximum simultaneous logins for endpoint users? I'm trying to limit the number of sessions our guest wireless accounts can have and am getting partial success.
example Wireless guest type i'm using has a session limit of 3. in the guest type setup it mentions that you need to check the online help for details on how to build an authZ policy to enforce this. it details setting up an authZ rule that uses the NetworkAccess.SessionLimitExceeded attribute and then setting up a new web redirection. I have done all this and can see in my Live Logs that the 4th login attempt for the guest user IS hitting the new authZ rule for the Session Limit Exceeded attribute and is supposed to be sent the new web redirection. all data from ISE points to this working correctly, except its not. the user gets in, does not get sent to page saying they've hit the limit and then are disconnected 30 seconds later due to the reauthentication timer setup in the authZ result.
so it seems like ISE is doing what its supposed to but my WLC's aren't. they are acknowledging the new reauth timer but NOT the URL redirect for the user.
