04-09-2014 04:19 AM - edited 03-10-2019 09:37 PM
Hello all,
We are implementing ISE 1.2 with latest patch. Looking for any advise on how to prevent users from accessing both wired and wireless nwtwork.I want to prevent user from accessing nw via both wired lan and guest wifi. Any advice on how to achieve this task will be highly appreciated
04-09-2014 02:20 PM
Dear,
You can limit guest access to only one guest session.(Web portal > settings > guest > settings ). Would this be enough for your requirement?
04-10-2014 02:31 AM
Hello Ahmed,
Thank you very much for your response. I guess the config you suggested will prevent to have user to have have multiple sessions. But I am looking for config to prevent user(employe) to login from his laptop via wired connection and guest (wireless) both simultaneously. He should be allowed to access only via wired (corporate nw ) or wireless access but not both at same time.
Hope to hear from you soon
04-10-2014 08:26 AM
Well i don't think this is possible expect you can do one thing when device connect using wired,client wireless adaptor should be disabled using posturing or using register keys in windows for this(verification).
04-11-2014 11:46 PM
You can accomplish through the cisco anyconnect NAM supplicant, by default when a wired connection is active it disables the wireless nic. When the wired connection is disconnected then the wireless radio turns on and connects. There is also a corporate ssid feature that disables connectivity to any other networks broadcasting in the area when that ssid is present. When the user takes the computer home or off prem then the other networks are available to connect to.
Let me know if you need some help locating that software documentation online.
It is the Cisco anyconnect Network Access Manager which to date is only available for Windows.
04-18-2014 03:12 AM
It is not possible through ISE
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: