Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Guest WiFi using Dot1x

Hi all,

 

I have been using the Guest functionality in ISE 1.1.4 (and previous versions) for a long time now and I've always been frustrated with it. I am now in the process of setting up an alternate Guest network that uses dot1x to reference the Internal Users ID source (where all registered guests are stored) in ISE to authenticate clients.

 

It seems to work perfectly for any activated guests, but any newly created account gets the following...

RADIUS Status:
Authentication failed : 24206 User disabled

 

Is there any way to circumnavigate the activation through the use of the CWP and thus make it possible for newly registered guests authenticate using dot1x?

Will changing the Guest Portal Policy Configuration (Not Used/First Logon/Every Logon) or Authentication Type (Guest/CWA/Both) solve this? Weary of changing it on the fly in production environment.

 

Thanks

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions

http://www.cisco.com/c/en/us

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/115802-radius-authentication-00.html

6 REPLIES
Gold

Message CodeMessage

Message CodeMessage ClassMessage TextMessage DescriptionSeverity
24206Local-user-DBUser disabledUser marked disabled in Internal database.Info

 

 

http://www.cisco.com/c/en/us

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/115802-radius-authentication-00.html

New Member

Ah perfect.Thanks a lot.

Ah perfect.

Thanks a lot.

Set the guests to be created

Set the guests to be created in the activatedguests group instead of the regular "guests" group and they should be usable right after they are created

New Member

how exactly do you configure

how exactly do you configure that?

New Member

Nevermind.Answered in the

Nevermind.

Answered in the article salodh linked

96
Views
0
Helpful
6
Replies