04-21-2013 09:33 PM - edited 03-10-2019 08:20 PM
Hi,
I am looking at implimenting a wireless hotspot and want to know if ISE 1.1.1 is able to enforce limits on the individual users (ie. Time limit, Data Limit)
These limits need to be erased at the end of the day.
I am using dynamic vlans to seperate out guests from corporate users.
ISE is in a 192.x.x.x address range and the guest vlan sits in a 10.x.x.x vlan.
Im struggeling with ISE terminating the Guest sessions and then not permitting that same user back onto the network.
04-24-2013 01:34 AM
Yes it can be done using the time profile option in ISE.Please review the below links on how to configure time profiles for guest and sponsor portals.
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html
http://www.cisco.com/en/US/docs/security/ise/1.0/sponsor_guide/ise10_sponsor.html
03-12-2014 06:23 AM
Time limit can be acheived by using "time profiles" but data limit can not be acheived..you can disable a guest account from sponsor portal
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide