ISE Guest Portal

[yohh]

Hello,

I have a client who wants to deploy Cisco ISE with a self-registered portal requiring sponsor approval. They want the guests to have network access for configurable lengths of time. Is this possible? I found the following documentation stating this could not work

https://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_guest_pol.html#72829

Setting the Time Profile for Self Registration

Choose the default time profile to assign to the guest user after self-registration. The time profiles determine the time periods in which guests can register access the network. Only CreateTime and FirstLogin type time profiles are available, and both are treated as FromCreation accounts when creating a self-registered guest user account.

This is a global setting affecting all Guest portals.

What are CreateTime and FirstLogin profiles?

Any insight would be much appreciated.

Thank you.

- Yale

[Jason Kunst · Accepted solution]

ISE 1.2 is end of life and support. Are you looking for 2.2?

Customers should be on 2.x code, please look at guest types under 2.x

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01110.html

Partners can also play around with this in the ISE Mobility Deep Dive demo in dcloud

https://communities.cisco.com/docs/DOC-74378

lots of articles under our community

https://communities.cisco.com/docs/DOC-64018

https://communities.cisco.com/community/technology/security/pa/ise/blog/2016/08/26/ise-guest-types-do-i-really-need-locations-and-timezones