03-17-2014 06:46 PM - edited 03-10-2019 09:33 PM
Hi,
Using WLC and ISE, is it possible to simply present Guest users with an AUP (without having to do any kind of authentication) before granting them Internet access..? Would this be done using Web Passthrough on the WLC or modifying a Portal template on the ISE so that it does not contain a Login page?? Any advice welcome.
Cheers,
Santi
03-18-2014 01:56 PM
I've done this before using a Device Web Authorization portal. The user is displayed an AUP and placed into an endpoint group that you assign them to. You would have an Authz policy to check to see if they match that group if connected to that SSID, if not, direct them to the portal to accept the AUP. If they are part of the endpoint group then it will just let them online. The only downfall is it is a one-time thing, so the first time they will be displayed an AUP but all subsequent logins they will just get access. You could clean out the endpoint identity group daily if you wanted to fix that.
10-01-2015 06:07 AM
Hi jjonston1127,
how did you setup the Device Web Authz portal? I want to implment an wlan guest access with aup only. How does the authorization profile and authorization rule look like?
03-19-2014 10:23 AM
AUP is only poped up after a successfull authentication
03-31-2014 05:07 AM
To support a fully-customized guest portal, you must provide a minimum set of HTML pages based on the features you want to support:
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide