Time based Guest WLAN user

[randyinfante21]

Hi All

Please help me to answer my queries. First, do WLC can make time based policy in WLAN users. I want to limit the time consuming of our guest client. Ex. For only 1Hr. And if client need to have internet again, client need to relogin again. Do we have that features in WLC? or if doesn't what need software to integrate that features.

Regards

[WiFi Trainers]

Hello,

You can use the session timeout feature under the Advanced section of the SSID. You can set it for 3600 seconds, which will ensure that the guest clients need to re-authenticate after 1 hour.

Best Regards,

WiFi Trainers (www.wifitrainers.com)

Your one stop solution for all your wireless training needs!

******** Please rate if useful *********

[randyinfante21]

Hi 

Is this section you're saying.? Limited time for guest user. 

Check Inclusion?

[Sandeep Choudhary]

If i UNDERSTAND CORRECTLY THEN :::::you want to have time based wlan access for guest user..

WLAN Enable /disable Scheduling:

You can do by using NCS /Prime iNfra.

Usine NCS you need to create TWO AP templates.   The first template will allow you to DISABLE the radios of the APs and the second template will ENABLE.

Now once you've created your template, you can create a schedule WHEN you want these templates to be invoked and select the APs you want to apply them into.

Fix time for guest user(1H / 8 H /  1day or 7 day):

You can Cisco ISE to create guest user via sponsor portal for specific time period.

http://www.cisco.com/c/en/us/td/docs/security/ise/2-0/sponsor_guide/b_spons_SponsorPortalUserGuide_20/Support_Guests.html

Reagrds

Dont forget to rate helpful posts

[randyinfante21]

Hi Sandeep

Is their any way to use this time based features using just only WLC?

[Sandeep Choudhary]

No, Its not possible on WLC. You must have either Prime INfra or Cisco ISE.

May be you can try this if you don't have these two upper devices(PI and ISE): Time-based ACL will allow you to enable/disable the dynamic VLAN interface.  The ACL is applied where the default-gateway of the WLC dynamic VLAN interface is found.

*** I never done that :)

Regards

Dont forget to rate helpful posts

[WiFi Trainers · Accepted solution]

Hi Randy,

As a correction to what Sandeep said, you can have your guest users configured to be time based by just using the WLC. The below link shows how this can be done using a lobby ambassador account to manage guest users:

http://www.cisco.com/c/en/us/td/docs/wireless/controller/7-0/configuration/guide/c70/c70users.html

You should also be able to do this when you create a guest user on the WLC using the lifetime option in the attached screenshot.

Hope this helps.

Best Regards,

WiFi Trainers (www.wifitrainers.com)

Your one stop solution for all your wireless training needs!

******** Please rate if useful *********

[Sandeep Choudhary]

Yeah, I forgot to mention about lobby admin.Only one issue regarding memory if we have many guests.

+5 Point :)

Regards

[WiFi Trainers]

No problem Sandeep :)

Best Regards,

WiFi Trainers (www.wifitrainers.com)