Cisco ISE Guest Sponsor Portal Isssue

[Pranav Gade]

Dear all ,

We have insatalled 5 ise 3315 boxes IOS 1.0.4 in our network where in two of them are admin node , two of policy services and one is mnt node. We are using guest sponsor portal for wirless guest user where in we have integrated WLC 5508 with ise and using weblogin for guest users.

We have created open ssid in wlc and using external redirected url of ise for guest login page.

But when we create any guest user in sponsor login for guest user we faced following issue

1) When guest user gets conected to wirless and login in to guest portal with credential after putting credential  then its again redirect to same login page

wihout successful login prompt.

Can we pompt successful login after guest login to guest portal or redirect to any other link like google.com so guest user will gets to know he is able to access internet now

2) We have creted time profile 8hours first login for guest user. When guest user gets connected while putting credential in to guest portal.

But we face issue after approximately every 20 mins guest gets disconnected from internet and guest again gets login page of guest portal and if we put same credential then its working but after approx 20 min interval user get disconnected from internet.

Can anyone help me to resolved above issue regading cisco ise guest sponsor portal

Thanks & Regards

Pranav Gade

[Tarik Admani · Accepted solution]

Pranav your answers are inline,

1) When guest user gets conected to wirless and login in to guest  portal with credential after putting credential  then its again redirect  to same login page

wihout successful login prompt. When you are using CWA (central web authentication) there is no way we can redirect users using the redirect-url because this will always redirect users for every time they initiate a web request. There is no other coa feature that will remove this condition since they have already been authenticated.  Here is a guide that explains the user experience when using central web auth -

http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_guest_pol.html#wp1296954

Can  we pompt successful login after guest login to guest portal or redirect  to any other link like google.com so guest user will gets to know he is  able to access internet now No this is not possible, you can change the verbage and force the AUP to be displayed informing users that they can retry their web request after hitting the accept button.

Here is the documented experience once users go through the guest process -

http://www.cisco.com/en/US/products/ps11640/products_configuration_example09186a0080ba6514.shtml#final

2)  We have creted time profile 8hours first login for guest user. When  guest user gets connected while putting credential in to guest portal.

But  we face issue after approximately every 20 mins guest gets disconnected  from internet and guest again gets login page of guest portal and if we  put same credential then its working but after approx 20 min interval  user get disconnected from internet. Check the advanced timer on your SSID as you may be hitting the session timeout on the WLC. Please disable this option and let the COA feature in ISE expire user sessions on the controller.

Thanks,

Tarik Admani
*Please rate helpful posts*

[Pranav Gade]

Thanks Tarik for you support and reply ..

for 1st issue we are getting login successful flash window which apper after putting credential but its just for some fraction of sec. Can we able to hold is prompt so user will get an idea that he's login gets susccesul and now able to access internet.

for 2nd issue I will check that ssid timer in wlc and will let you know for the same

Thanks

Pranav

[Tarik Admani · Accepted solution]

Pranav,

I dont know that a setting exists.

Attached is a screenshot of the timer that I am referencing.

thanks.

Tarik Admani
*Please rate helpful posts*

[Pranav Gade]

Hi Tarik ,

We have ise 1.2.1 and still facing the same issue - 

 We have creted time profile 8hours first login for guest user. When  guest user gets connected while putting credential in to guest portal.

But  we face issue after approximately every 20 mins guest gets disconnected  from internet and guest again gets login page of guest portal and if we  put same credential then its working but after approx 20 min interval  user get disconnected from internet.

Even session time out interval in WLC is disable

Can you help me on the same

Thanks & Regards

Pranav