View Cart
0 Items | Total: US$0.00
Welcome,      Register

You are here

SEC0282 - ISE 2.2 Guest Access with Sponsored Guest (Part 4)

Rating: 
5
Average: 5 (2 votes)
Difficulty Level: 
0
Lab Document: 
<Please login to see the content>
Video Download: 
Title: SEC0282 - Video Download $24.00
Purchase SEC0282 - Video Download $24.00
The video demonstrates the second guest access deployment model on Cisco ISE 2.2 called Sponsored Guest. We will go through the complete workflow of configuring sponsored guest including some basic customization for both guest and sponsor portal. We will look at how to provide guest-equivalent access to our employees as well as to have guest devices automatically connected via device registration. Testing will be performed on both wired and wireless.
 
Part 4 of this video covers wireless client testing
 
Topic:
  • Guest Access Workcenter
  • Guest Settings (Account Purge, Custom Field, Email Settings, Location/SSID, Username/Password Policy)
  • Endpoint Identity Group
  • Guest Type
  • Guest Portal with Basic Customization
  • Sponsor Group
  • Sponsor Portal with Basic Customization
  • Authentication Policy (Wired & WLAN MAB)
  • Policy Element Result
    • Authorization (DACL and Named ACL)
    • Authorization (Authorization Profile)
  • Authorization Policy
  • Device Registration
  • Endpoint Purge
  • Guest Simultaneous Login

About Author

Metha Chiewanichakorn, CCIE#23585 (Ent. Infra, Sec, SP), is a Cisco networking enthusiast with years of experience in the industry. He is currently working as a consulting engineer for a Cisco partner. As a founder of and an instructor at labminutes.com, Metha enjoys learning and challenges himself with new technologies.

5 comments

I have followed your steps but unfortunately i cannot access into sponsorportal. I tried to change identity sequence to try only internal users or only LDAP but it does not give any result. It just write authentication failed.

Hmm. I could not enter the sponsor portal because i use to enter the link with Admin note ip address not PSN. I wonder why i cannot enter sponsor portal using admin note IP?

PSNs are ones that serve sponsor portal and guest portal so you need to have the URL points to PSN and not Admin

With this setup, how do you handle HTTPS redirect? I have the redirect setup, but all the browsers are blocking the ISE Portal from showing, due to cert errors. If you go to a HTTP URL, then it works fine.

We believe this is a known issue and there is no way around it today.