View Cart
0 Items | Total: US$0.00
Welcome,      Register

You are here

SEC0282 - ISE 2.2 Guest Access with Sponsored Guest (Part 5)

Rating: 
5
Average: 5 (1 vote)
Difficulty Level: 
0
Lab Document: 
<Please login to see the content>
Video Download: 
Title: SEC0282 - Video Download $24.00
Purchase SEC0282 - Video Download $24.00
The video demonstrates the second guest access deployment model on Cisco ISE 2.2 called Sponsored Guest. We will go through the complete workflow of configuring sponsored guest including some basic customization for both guest and sponsor portal. We will look at how to provide guest-equivalent access to our employees as well as to have guest devices automatically connected via device registration. Testing will be performed on both wired and wireless.
 
Part 5 of this video covers wired client testing
 
Topic:
  • Guest Access Workcenter
  • Guest Settings (Account Purge, Custom Field, Email Settings, Location/SSID, Username/Password Policy)
  • Endpoint Identity Group
  • Guest Type
  • Guest Portal with Basic Customization
  • Sponsor Group
  • Sponsor Portal with Basic Customization
  • Authentication Policy (Wired & WLAN MAB)
  • Policy Element Result
    • Authorization (DACL and Named ACL)
    • Authorization (Authorization Profile)
  • Authorization Policy
  • Device Registration
  • Endpoint Purge
  • Guest Simultaneous Login

About Author

Metha Cheiwanichakorn, CCIE#23585 (RS, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new Cisco technologies.

2 comments

i tried to change the VLAN for wired guest user after registration by adding VLAN ID in authoriztion profile and vlan changed successfully but guest still keep old ip address and i have to do
>ipconfig /release then >ipconfig /renew
so user can get new ip address

It is usually not a good idea to change VLAN after user already obtained IP due to the problem you just mentioned. If you want guest to be in an isolated VLAN, it is best to make that VLAN the default VLAN on the port and instead change VLAN on 802.1X users.

Lab Minutes Classifieds