You are here
SEC0282 - ISE 2.2 Guest Access with Sponsored Guest (Part 1)
Difficulty Level:
Lab Document:
<Please login to see the content>
Category:
Security
The video demonstrates the second guest access deployment model on Cisco ISE 2.2 called Sponsored Guest. We will go through the complete workflow of configuring sponsored guest including some basic customization for both guest and sponsor portal. We will look at how to provide guest-equivalent access to our employees as well as to have guest devices automatically connected via device registration. Testing will be performed on both wired and wireless.
Part 1 of this video covers Identity and Settings Configuration
Topic:
- Guest Access Workcenter
- Guest Settings (Account Purge, Custom Field, Email Settings, Location/SSID, Username/Password Policy)
- Endpoint Identity Group
- Guest Type
- Guest Portal with Basic Customization
- Sponsor Group
- Sponsor Portal with Basic Customization
- Authentication Policy (Wired & WLAN MAB)
-
Policy Element Result
- Authorization (DACL and Named ACL)
- Authorization (Authorization Profile)
- Authorization Policy
- Device Registration
- Endpoint Purge
- Guest Simultaneous Login
2 comments
Session timout vs duration of the guest account
Hi Metha. I just wonder what is the relation between session timeout/client user idle timeout and duration of the guest account. Lets say we have an SSID with 8h session timeout and guest account with 4h. I understand that within the 4h period user can come back without being reqested to logg in again but ones the account expires the session time of 8h out does not make any sens as the user is inactive. On the other hand we can have user account which last longer then 8h. What is the user experience ? Br Piotr
Session timout vs duration of the guest account
Once guest account expires, their session should be cleared eventhough session timeout might be longer.