Lab Minutes Forum

Technical Discussion => Security => Topic started by: pemasiri on June 02, 2015, 02:36:40 AM

Title: Guest credential restrict to particular device only
Post by: pemasiri on June 02, 2015, 02:36:40 AM
Hi,

I want to restrict particular guest username/password only to a particular device (similar to MAC authentication in WLC). I tried to configure this on ISE 1.3 on guest option. I set to one (1) on the option "Maximum devices guests can register:", but still same credential can use by another device successfully.

Can anyone advise what is missing there in order to achieve the above goal.

thanks.
Title: Re: Guest credential restrict to particular device only
Post by: MC on June 05, 2015, 08:56:46 PM
Hi pemasiri, I don't think there is really a good and efficient way to restrict a guest user to just one specific device by the device MAC address. ISE only allows you to limit guest user to one concurent device but that device can be any device and that device can change if the guest session is removed from ISE.
Device registration wouldn't do it neither as it is meant for non-user device like printer which authentcate via MAB and not username/password.
SimplePortal 2.3.7 © 2008-2024, SimplePortal