Cisco Guest Server_Restrict Guest users

Hi,
Is it possible to control or put restrictions in guest server for guest users. My NAC deployment is in OOB mode. I want to restric and do posture validation.
Can some1 help me??
Nitesh

Dear Nitesh,
What is the exact issue you have with integrating NGS with the NAC Manager?
The procedure to configure this is described on the NGS Config guide:
http://www.cisco.com/en/US/docs/security/nac/guestserver/configuration_guide/20/g_nac_intg.html
You basically need to specify the NAC Manager details (address, credentials and default role) on the NGS, so that the Guest Server can add/remove the guest users from the NAC Manager DB.
You should also configure the NGS as a RADIUS accounting server on the NAC Manager, so you can collect info about the Guest user sessions on the NGS side.
I hope this helps.
Regards,
Federico
If this answers your question please mark the question as "answered" and rate it, so other users can easily find it.

Similar Messages

WLC - guest account multiple users

Hi,
I have been looking at guest access features of the WLC and I can see the ability to specificy an account duration as a Lobby Ambassador but does the WLC support multiple logins per guest account?
I.e. I want to create a single guest account for use by 100 users. Is there any way to achieve this or would I need to create 100 individual guest user accounts?
Many thanks,
Paul.

Paul,
If you have WCS available, you can import a .csv file that contains the proper information for usernames/passwords:
http://www.cisco.com/en/US/docs/wireless/wcs/7.0/configuration/guide/7_0temp.html#wp1102820
Example file would look like:
Username   Password   Profile     Description
User1      Cisco      Any Profile Net User 1
User2      Cisco                  Net User 2
User3      Cisco      Internal    Net User 3
The other option I can think of would be to build a list of command line configurations for the WLC, and manipulate the list with your already created usernames/passwords in a text editor. The command to configure a guest user on the WLC CLI is:
config netuser add wlan userType [lifetime ] [description ]
Thanks,
-Patrick

How to limit bandwidth for guest per connection/user on 2504 WLC?

We have 2504 Controller with 24 AP's registered in a hotel and we would like to limit bandwidth per connection or per user.
I went to QOS Profiles > Bronze >
I do not see Per user Bandwidth Contracts(K)* instead I see WLAN QOS Parameters with below options.

Hello
Our WLC model 5508, but there is confusion on difference between Override Per-User Bandwidth Contracts (kbps) vs Override Per-SSID Bandwidth Contracts (kbps)
Our requirement-
On Guest SSID - Each user / session should not exceed bandwidth more than 758kbps upstream/downstream
Only Guest users cannot login to multiple device with single userID - applicable only to Guest SSID other SSID should not get impacted.
hope to get some response
cheers
ST

ISE Guest-Account Single-User Multiple Logins

Hello,
How to make ISE to only allow one guest-user account login at a time. the actual issue I have is- when I give one Guest user-id to someone, he can circulate that user-id with others and multiple unauthorized guests can use that single user-id to connect to Guest-portal
Anyway to restrict that ?

Restricting Guests to One Active Network Session
You can restrict guests to having only one device connected to the network at a time. When guests attempt to connect with a second device, the currently-connected device is automatically disconnected from the network.
This is a global setting affecting all Guest portals.
Step 1 Choose Administration > Web Portal Management > Settings > Guest > Portal Policy.
Step 2 Check the Allow only one guest session per user option.
Step 3 Click Save .

Which is the login behind reconnecting from guest to the user who work

HI, Please
Which is the logic behind reconnecting from guest to the user who will use the application.
For example in oracle developer I connected as a user guest, having minimum privileges to log logging attempts and load some basic information in the logon form.
Then the user reconnected in code as the user he will be in all the applicatoin and went to the main form where the menu was (not using native logon from tool), it was the command logon(xx,xx,xx)
Does the same logic applies in jdeveloper?
How can I reconnect using adf in code, I search reconnect jdeveloper and didn't found nothing for doing in code.
Thank you

Hi,
in Oracle Forms I assume you used data base login. You can use dynamic JDBC credentials in ADF as well and an examle exist here http://radio.weblogs.com/0118231/stories/2004/09/23/notYetDocumentedAdfSampleApplications.html
However, if yu really use different physical database accounts then for the web this seems to be wrong because in here its more common to work with lightweight accounts, which are are not the same as database accounts
Frank

Guest and all users have invalid password

Dear all,
os oul5x64
ebs 12.1.3
when login from login page no one can connect because somehow guest user password was invalid.
using note How To Successfully Change The Guest Password In E-Business Suite 11.5.10 and R12 (Doc ID 443353.1)
and was able to change guest password and now had to change password for every users.
This is a test ENV so not many users on it.
Question: How can i find down what happened to GUEST and all users password.
and where to check.
Thanks in advance.
Regards,

Thanks Hussein,
there is some error in the application.log file.
Would you please advise.
Regards,
13/09/18 15:27:53.717 html: Servlet error
java.io.IOException: Broken pipe
        at sun.nio.ch.FileDispatcher.write0(Native Method)
        at sun.nio.ch.SocketDispatcher.write(SocketDispatcher.java:29)
        at sun.nio.ch.IOUtil.writeFromNativeBuffer(IOUtil.java:72)
        at sun.nio.ch.IOUtil.write(IOUtil.java:43)
        at sun.nio.ch.SocketChannelImpl.write(SocketChannelImpl.java:334)
        at java.nio.channels.Channels.writeFullyImpl(Channels.java:59)
        at java.nio.channels.Channels.writeFully(Channels.java:81)
        at java.nio.channels.Channels.access$000(Channels.java:47)
        at java.nio.channels.Channels$1.write(Channels.java:155)
        at com.evermind.server.http.AJPOutputStream.endRequest(AJPOutputStream.java:117)
        at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:317)
        at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
        at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
        at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
        at java.lang.Thread.run(Thread.java:662)
13/09/18 15:32:25.704 html: OABodyBean, localName='body': Could not find partial target: PayablesReviewSettings
13/09/18 15:33:50.414 html: OABodyBean, localName='body': Could not find partial target: PaymentMethodCode2
13/09/18 15:33:50.414 html: OABodyBean, localName='body': Could not find partial target: PaymentDocumentName
13/09/18 15:33:50.415 html: OABodyBean, localName='body': Could not find partial target: BankAccountName
13/09/18 15:43:05.385 html: OABodyBean, localName='body': Could not find partial target: SendPaymentARFlag
13/09/18 15:43:05.385 html: OABodyBean, localName='body': Could not find partial target: SSNId
13/09/18 15:46:30.744 html: OABodyBean, localName='body': Could not find partial target: SendPaymentARFlag
13/09/18 15:46:30.744 html: OABodyBean, localName='body': Could not find partial target: SSNId
13/09/18 15:47:34.80 html: OABodyBean, localName='body': Could not find partial target: SendPaymentARFlag
13/09/18 15:47:34.80 html: OABodyBean, localName='body': Could not find partial target: SSNId

Start vm linux Guests in single-user mode

Hi -
I have OBIEE vm template installed and everything is OK, I forgot the roor password for this guest, (ovsroot) is not working I think I've changed it. One option is to start this guest in single-user mode, I tried but you can't see the console until the system is starting services which is a late phase to run linux single command on boot prompt. Please advice how can change my root password using single-user mode.
thanks in advance
Omar

Omar M Sawalhah wrote:
Sorry, but I am not sure I am getting this right, where should I add 'single console=xvc0', if you mean the guest, as I mentioned in my post I don't know the root password and I can't logon. please kindly if you can add more detailed steps.When you boot your guest using xm create -c vm.cfg, it will immediately connect you to the console of the guest. That will show you the GRUB boot menu. You then need to edit the kernel boot line exactly the same way you would a physical server. In order to boot into single-user mode, you need to add the parameter single to the boot line. Along with that parameter, you also need console=xvc0 so that the guest uses the connected console to show you the boot process and allows you access to the single-user shell. If you do not use this parameter, you'll need to determine the VNC port used by the guest and used VNC to connect to the console instead.

Guest variable 'guest info.return_code' not configured correctly.

Hi,
I'm converting a SQL Server 2012 from Base DBVM to Base DB Template. After a while working on the conversion I get this error:
"Guest variable 'guest info.return_code' not configured correctly."
If I double-click the error I get the following message: "Cannot get detail information for the specified resource bundle."
I'd really appreciate if anyone can help with the issue.
Regards
Fernando

carlasummers wrote:
...Error: variable hourlyRate might not have been inialized and variable hoursWorked might not have been inialized. ....Haven't read your code, but whenever I see an error like this, I find that usually correcting what it tells me to correct helps: initialize the variables.
i.e.,:
    double hoursWorked = 0.0;
    double hourlyRate = 0.0;
    double weeklyPay = 0.0;also: never use float when you can use double (there are exceptions but they are few).
also: You need to get the employee name within the loop. Also it would help to add the prompt: "enter \"stop\" to quit" or something of that nature. Assume that the users of your program are idiots.
Also, when posting code here, please use code tags so that your code will retain its formatting and thus will be readable -- after all, your goal is to get as many people to read your post and understand your code as possible, right?
To do this, highlight your pasted code (please be sure that it is already formatted when you paste it into the forum; the code tags don't magically format unformatted code) and then press the code button, and your code will have tags.
Another way to do this is to manually place the tags into your code by placing the tag [code] above your pasted code and the tag [code] below your pasted code like so:
[code]
// your code goes here
// notice how the top and bottom tags are different
[/code]Best of luck.
Edited by: Encephalopathic on Apr 25, 2009 6:56 AM

Issue with cisco acs 4.2.Users unable to login aaa client but after restarting group policy able to login

issue with cisco acs 4.2.Users unable to login aaa client but after restarting group policy able to login

issue with cisco acs 4.2.Users unable to login aaa client but after restarting group policy able to login

Is it possible to map a Sponsor Group in Cisco ISE to a user group in Active Directory, through a RADIUS server?

Hi!!
We are working on a mapping between a Sponsor Group in Cisco ISE and a user group in Active Directory....but the client wants the mapping to be through a RADIUS SERVER, for avoiding ISE querying directly the Active Directory.
I know it is possible to use a RADIUS SERVER as an external identity source for ISE.....but, is it possible to use this RADIUS SERVER for this sponsor group handling?
Thanks and regards!!

Yes It is possible to map Sponser group to user group in AD and if you want to know how to do please open the below link and go to Mapping Active Directory Groups to Sponsor Groups heading.
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html#wp1096365

Cisco Unified MeetingPlace web user portal

All,
Someone could say me what is the URL of the "Cisco Unified MeetingPlace web user portal"?
My design is MeetingPlace / WebEx with MeetingPlace Scheduling.
Thanks a lot,
Luciane de Medeiros

RC,
This behavior is stemming from a change in MP 7.0 MR2 to disable the MPWeb login for system profiles. This was an internal change made by the developers to restrict the log on to the MPWeb page by the default accounts created in MeetingPlace upon installation. The change now displays this error when the admin account is attempted to be used for MPWeb login, as you experienced-
Error:[22953] You cannot sign in to the Cisco Unified MeetingPlace Web Server interface using preconfigured system profiles.
You should be able to log into MPWeb using any other user profile that you have either created manually or pulled in from LDAP/Active Directory. You just cannot use the admin account. This is reserved for login to the MP Application Server Administration page only. I am going to work to get this information added to the MP 7.0 documentation with a note for changed behavior in MR2 and above. Here is the note from MP 8.0 documentation-
Note: You cannot use this preconfigured admin profile to access the Cisco Unified MeetingPlace Web Server interface. Instead enter the User ID and password information from one of the other user profiles that have system administrator privileges to sign in to the Web Server.
Please let me know if you have any further questions.
Thank You,
Gerry

Cisco prime Infrastructure guest user schedule

Hi All,
What is the procedure to follow to create a Lobby Ambassador account in Cisco Prime, who can create a guest user and schedule the new password generation everyday for that guest account.
We want the Guest Account to be created once with one username (Ex: Guest 1) and everyday, a new password should be generated for Guest 1 and the credentials should be mailed to a network admin.
And how should I create lobby ambassador account in CPI? I know the prcedure for WLC.
Thanks,
CJ

You can find information on creating a Lobby Admin here:
http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/1-2/user/guide/prime_infra_ug/maint_user_access.html#wp1055438
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Cisco WLC local net user - guest account

Hello,
We have a 2504 Cisco WLC. I am creating Local Net Users for one of the WLANs that uses Web Auth and the Local Database.
My one question is, what does a "guest account" do differently than a non guest account besides the ability to create the lifetime of the account? I mean, it seems both give access to the WLAN so I am failing to see the difference between the two.
Any help is greatly appreciated.

A guest acct can only login to a webauth WLAN. A normal netuser can login to any WLAN that you allow or all. Including 802.1x if that WLAN is allowed to chek the local db
Steve
Sent from Cisco Technical Support iPhone App

ISE Guest Wifi Portal Users restricted to 5 day account

Hi,
I have a custom Guest wifi portal configured in Mulit-Portal Configuration to do self service, Portal Type is default Portal.
I have the Guest Portal Policy configured to a time profile of 6 months which works ok for my other wifi profiles.
My users however are only getting a 5 day account to expiry.
I suspect the Guest Portal I have configured is not using the Default Guest Portal Policy as configured in "Web Portal Management\Settings\Guest\Portal Policy but I can't find any other option or settings
Please Any help gratefully recieved.
Thanks

There was a bug that caused a failure like this, think it was solved in 1.2 patch 8... could be worth a try to patch if you haven't done so....

Cisco WLC 5508 Guest Authentification issue

Hi ..
I have one interface setup to a Cisco 2921 router connected to a Cable modem.
DHCP is on the 2921.
when I connect to the ssid for my guest i'm redirected to the authentification portal 1.1.1.1 .
I'm putting valide credential and when pressing the submit button .. it just go anywhere.
I have setup another SSID with a psk and it's working fine.. getting ip and able to browse internet.
From what i have read... it's apparently DNS issue on my router.. but what should I check.

My client has ip like that
   Description . . . . . . . . . . . : Intel(R) 82579LM Gigabit Network Connection
   Physical Address. . . . . . . . . : 40-2C-F4-ED-AD-FB
     IPv4 Address. . . . . . . . . . . : 192.168.6.36
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.6.1
   DNS Servers . . . . . . . . . . . : 24.200.241.37
                                       24.200.243.189
DNS are the one from my service provider

Cisco Guest Server_Restrict Guest users

Similar Messages

Maybe you are looking for