Thanks for the job! I'm trying to use GuestFlow on ISE 3.1 with aruba IAP but seems not to work. I need to associate a user authentication with a previous MAB one, for corporate users logged in by a guest portal. But I'm not able to find the glue for that on ISE.
I'll be very graceful if you can tell if it's that possible in any way?
I also have the same problem, I am using AP ARUBA and using the guest portal at the time of completing the authentication to be able to access the network does not allow me to access the network.
I was not able to find a way to work with guest flow using Aruba APs.
The only work arround is to search if the endpoint device exists as a registered one.
To do this ensure that device registration is enabled for the guest type used in the guest portal:
Go to Work Centers / Guest Access / Portals & Components / Guest Types and choose the guest type
Note the endpoint identity group from the field “Assign endpoint identity groups for guest device registration workflows”
Then create an authorization rule which search for the guest endpoint in the endpoint identity group configured in the “Assign endpoint identity groups for guest device registration workflows” field.
If the endpoint exists in the group means that the user has finished the registration process, and the device is automatically registered as a known device.
To force the guest user to re-login it's important to do a frequent guest endpoint purge process.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
