Guest Portal HTML Code

Dear All,
One of our client has a query related to guest portal default webpage that, if their application team can modify the default guest portal web page then how the sample code can be obtained ?
I found following link so kindly let me know if this will fullfill the requirement,
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html#wp1128489
Thanks

Hi
The link that you have provided, will definitely be helpful. More over the given below link will help you in configuration and whole implementation.
The Cisco ISE Guest Service provides the following configurable default portals:
• Guest portal
• Sponsor portal
• Device registration web authentication portal
The Cisco ISE Guest Service supports customizable default portals to handle Guest User login, as well as the ability to create and manage Guest User accounts. Guest accounts are defined for specified time periods that are established at the time of creation.
The Guest User Portal is configured as the captive portal for WLC Local WebAuth. In the case of wired NAD, a URL-redirect value is returned to the NAD from Cisco ISE during an initial MAB lookup failure. The guest is ultimately presented with a login page where they can enter a username and password.
http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_ug.pdf

Similar Messages

Guest book html code

Hi everyone,
Widget? Html Code?
Thanks in Advance

The only way currently would be to have the visitor fill in a form and then you add the entry manually in Muse. You could use web apps in Business Catalyst but that would be quite expensive to simply have a guest book.

Effect html code of sap portal

Hi all
Along with our web team I am looking into re-skining the SAP portal and was just wondering if there is a way of effecting the html code generated for each page of it. I know you can change the CSS tags, images via the theme editor etc but was wondering if it was possible to actually change the html code. i.e. have the ability to remove certain <table> tags or add new div tags and assign a class to them which could them be re-styled by adding aditional code to the CSS file. Basically the more that can be accessed the better so any help/advice in this area would be much appreciated.
Regards
Mart

Hi,
for more info about Tag Library read this: [Tag Libraries Tutorial |http://java.sun.com/products/jsp/tutorial/TagLibrariesTOC.html] and usage in portal this: [Layout Tag Library|http://help.sap.com/saphelp_nw2004s/helpdata/en/42/ea3a29b28e1bcae10000000a11466f/frameset.htm]
Romano

How to import my html code in to portal?

hi all,
I have got designed all my htmls pages from a web designer now how can i put all this html code in to portal package without a long by line cut and paste from html in to pl/sql??please suggest as i have around 60 odd htmls pages and badly need a direct way to import all these to pl/sql pakage into portal
thanx in advance
anurag

I have tried the above mentioned solutions but it only adds a link to the html page and the full page.The tutorial says add a perspective and add a file item to it(ur html page) and then publish that perpective as portlet.So i did it that way but first i couldn't get the genereated code for the portlet and then felt even if i would have get the page there would have been just a link to html page and not the page it self??please suggest a solution for this as I have around 60 html pages with vey complex designs so line by line code cut/paste gonna be avery time consuming/complex option.
null

How to link a Portal User ID in the Html code

Hi,
I have requirement where in I need to create a HTML page with a Input Parameter as Portal user ID.
This HTML Page is included in a webpage created by Web Page Composer.
Please guide me how i can catch Portal UserID PArameter in this HTML code ?
OR
Can I use EPCM Portal Eventing for the same ?
Awaiting Reply !
Thanks,
Smita Thorat
Edited by: smita thorat on Feb 8, 2010 5:09 PM

Hi!
The way you suggest should not be used.
A CS user will be created as a normal OID user and will receive the CS attributes in a different subtree later during the provisioning.
For creating CS users use oesuser and uniuser. Files provisioning will work in a different manner anyway.
cu
Andreas

After add single signoff HTML code, Portal system can not login in Firefox

We implemented single singon between our Portal system and HCM system.
After we add the single signoff HTML code to the signout.html,expire.html, exception.html file of the web server of portal system, and we change the web profile:
Logout Page:signin.html to signout.html
Signon Page:signon.html to signout.html
We can not login the Portal system in Firefox browser, system display the following error information:
"You must have cookies enabled in order to sign in to your PeopleSoft application."
We can login in the Portal system in IE browser.
We can login the HCM login in FireFox.

My HCM and Portal application is 9.0. PeopleToos is 8.49 for the same application.
The Firefox Browser is :3.0.1.
My App, Web and DB server for the HCM and Portal deployed on the same local machine, so the tow application have the same domain.
And the client browser is on the same machine with the server.
And when I remove all the pagelet from the portal homepage, the system report the same error information when login portal system in Firefox. Only when I stop the HCM web server, I can login in portal system in Firefox.

ISE 1.2.1.198 - Guest Portal Configuration

Is it possible to customize the default portal and add a paragraph any where on the login page with instructions? I've tried adding the text in the Pre-Login Banner Text field, and it does wrap to the next line, but text goes of the screen before wrapping. Would like to be able to add carriage return in the text, so text would scroll off the screen.

ISE 1.3 (due out in November time frame) will have a huge amount of customization of the portal available for your use.
If you really need to do it before then, and you have an ISE-certified Authorized Technology Partner you're working with, they have access to a Guest Portal Builder tool that can be used.
Failing those, you're back to changing the native html code for the portal by hand. Not recommended.

WLC Guest portal - External DNS issue

I have an interesting behavior. When my guest users attach to the guest network, I want them to use some external DNS source and not my organizations DNS servers. So, I set the dhcp scope options to point to other DNS Servers. When I do, the users don't seem to be redirected to the WLC guest portal, they get nothing and because of that, they cannot get to the Internet.
I am not sure why this is happening. The re-direction URL is https://1.1.1.1/login.html?redirect=www.google.com?/ocid=iehp
I don't understand why pointing a guest client to an external DNS servers would cause the guest login page not to come up.

The issue is likely that you are attempting to redirect an HTTPS page. See this link for more information:
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/115951-web-auth-wlc-guide-00.html#anc7
You didn't mention your code rev, but it seems that 8.0 is able to redirect HTTPS for guest portal.

HTTPS Guest Portal Redirection

Dears,
We have Guest Portal on ISE server, when our guests connect to Guest SSID they automatically redirected to WEB portal
it works only with http websites
if user writes in his browser for example facebook.com or some websites with https redirection doesnt happens
thank you

It's new:) the first version of 8.0.100.0 wasn't great if you ask me. v8.0.110.0 is MR1 and fixes some issues but it's new. I would wait for MR2/3 before going into production unless you really need to go to v8.0. You can always downgrade. You need to make sure your AP's support this code and if you have WCS/NCS/PI and or MSE. Here is the compatibility matrix:
http://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html
-Scott

ISE 1.2 customizing guest portal

I am having some issues trying to customize colours on the default guest portal in ISE 1.2.
Is there really no way to change the entire page background colour, except going through creating a complete set of html files ?
It seems if i upload a transparent background image for both the banner and the logo, and then change the all the gackground coulour settings, the colour only affects the area where the cisco splash logo is, and not the entire page.
I attached my settings, and how the page looks with those, what i am after is the entire page black, and then white text.

Hello Jan
You can customize the look-and-feel of the end-user portals by uploading your company's logos, background images, or color schemes. These changes apply to the My Devices, Sponsor, and Guest portals, but you can assign different images and colors to the mobile Guest portal.
These settings allow you to change the appearance of the portals without having to upload customized HTML files to the Cisco ISE server. However, if you want to create themes unique to specific Guest portals, you must upload your custom HTML files instead.
Step 1 Choose Administration > Web Portal Management > Settings > General > Portal Theme.
Step 2 Upload the graphics and change the color settings in the Style Settings section to customize the standard portals.
Step 3 Upload the graphics and change the color settings in the Mobile Device Style Settings to customize the Guest mobile portal.
Step 4 Click Save.

5760 v3.6 guest portal redirect to ISE

I'm testing a new set of 5760 controllers for a future production rollout, running software version 3.6. Our current production setup consists of older WISM-1 and 4402 controllers running CUWN 7.0. Our guest network has an anchor in the DMZ, redirecting to ISE.
In the recent thread (https://supportforums.cisco.com/discussion/12319151/3850-ise-guestportal-no-redirect-v-334), one of the posters said that guest redirection in 3.6 works similarly to redirection in CUWN, while in 3.3 it is very different. I found the documentation for 3.3 (http://www.cisco.com/c/en/us/support/docs/wireless/5700-series-wireless-lan-controllers/117717-config-wlc-00.html), which I have to say I don't like very much. However, I find the configuration and command reference guides for 3.6 are less than helpful on this point.
So the question I have is whether guest networking with an external redirect to ISE looks like the following in 3.6? Or does it work like CUWN, where the SSID is configured with layer 3 security? If it uses layer 3 security like CUWN, does anybody have a quick configuration sample for how it can work end to end in 3.6?
------ From the document http://www.cisco.com/c/en/us/support/docs/wireless/5700-series-wireless-lan-controllers/117717-config-wlc-00.html ---------
The flow includes these steps:
The user associates to the web authentication Service Set Identifier (SSID), which is in fact open+macfiltering and no Layer 3 security.
The user opens the browser.
The WLC redirects to the guest portal.
The user authenticates on the portal.
The ISE sends a RADIUS Change of Authorization (CoA - UDP Port 1700) in order to indicate to the controller that the user is valid, and eventually pushes RADIUS attributes such as the Access Control List (ACL).
The user is prompted to retry the original URL.

I have a project with a 5760 running 3.6 working to a 5508 anchor controller in a DMZ.
I have web authentication working to an ISE OK.
Regards
Roger

Ise 1.2, cannot access guest portal

I upgraded from 1.1.4 patch 3 to 1.2 but cannot access guest portal anymore nor with FQDN:8443 nor with IP:8443
any idea?

I had attached the steps to configure the guest portal and hope will address the problem.
Configuring the Guest Portal
Adding a New Guest Portal You must configure settings for the Guest portal before allowing guests to use it to access the network. Some settings apply globally to all Guest portals and other require you to set them for each portal individually.
You can add a new Guest portal or edit an existing one.
Step 1Choose Administration > Web Portal Management > Settings > Guest > Multi-Portal Configurations.
Step 2Click Add.
Step 3Update the fields on each of these tabs:
•General—enter a portal name and description and choose a portal type.
•Operations—enable the customizations for the specific portal
•Customization—choose a language template for displaying the Guest portal with localized content
•File Uploads—displays only if you have chosen a portal type requiring you to upload custom HTML files.
•File Mapping— identify and choose the HTML files uploaded for the particular guest pages. Displays only if you have chosen a portal type requiring you to upload custom HTML files.
•Authentication—indicate how users should be authenticated during guest login.
Step 4Click Submit.
Specifying Ports and Ethernet Interfaces for End-User Portals
You can specify the port used for each web portal allowing you to use different ports for the end-user portals: Sponsor, Guest (and Client Provisioning), My Devices, and Blacklist portals. The Client Provisioning portal uses ports 8905 and 8909 for posture assessments and remediation, which you cannot change. Otherwise, it uses the same ports assigned to the Guest portal.
You can also partition portal traffic to specific Gigabit Ethernet interfaces. For example, you might not want the Admin portal (which always uses GigabitEthernet 0) available on the same network as guest users or employee devices.
Step 1Choose Administration > Web Portal Management > Settings > General > Ports.
Step 2Enter the port value in the HTTPS Port field for each portal. By default, the Sponsor, Guest, My Devices portals use 8443, and the Blacklist portal uses port 8444.
Step 3Check the Gigabit Ethernet interfaces you want to enable for each portal.
Step 4Click Save.
If you have changed the port settings, all nodes (Administration, Policy Services, and Monitoring) restart automatically, which may take several hours to complete.
Tips for Assigning Ports and Ethernet Interfaces
•All port assignments must be between 8000-8999. This port range restriction is new in Cisco ISE 1.2. If you upgraded with port values outside this range, they are honored until you make any change to this page. If you make any change to this page, you must update the port setting to comply with this restriction.
•You must assign the Blacklist portal to use a different port than the other end-user portals.
•Any portals assigned to the same HTTPS port also use the same Ethernet interfaces. For example, if you assign both the Sponsor and My Devices portals to port 8443, and you disable GigabitEthernet 0 on the Sponsor portal, that interface is also automatically disabled for the My Devices portal.
•You must configure the Ethernet interfaces using IP addresses on different subnets. Refer to these guidelines to help you decide how best to assign ports and Ethernet interfaces to the end-user portals:
Specifying the Fully Qualified Domain Name for Sponsor and My Devices Portals
You can set the Sponsor and My Devices portals to use an easy-to-remember fully-qualified domain names (FQDN), such as: mydevices.companyname.com or sponsor.companyname.com. Alternatively, Cisco ISE also supports wildcard certificates to address certificate name mismatch issues. You must configure DNS to resolve to at least one policy services node. If you have more than one policy services node that will provide portal services, you should configure high availability for the portal. For example, you could use a load balancer or DNS round-robin services.
Before You Begin
Step 1Choose Administration > Web Portal Management > Settings > General > Ports.
Step 2Scroll to the Portal FQDNs section, and check the appropriate setting:
•Default Sponsor Portal FQDN
•Default My Devices Portal FQDN
Step 3Enter a fully qualified domain name.
Step 4Click Save, and all nodes (Administration, Policy Services, and Monitoring) restart automatically, which may take several hours to complete.
Step 5Configure the network DNS server so that it resolves the FQDN to the Sponsor or My Devices portal nodes. You must also update DNS to ensure the FQDN of the new URL resolves to a valid policy service node IP address. Additionally, to avoid certificate warning messages due to name mismatches, you should also include the FQDN of the customized URL in the subject alternative name (SAN) attribute of the local server certificate of the Cisco ISE policy service node.

Cisco ISE Guest Portal - DNS Issue - External Zone

Hello,
I have a customer that has the following sceanrio :
In a wireless deployment and a Cisco ISE 1.1.3 deployment with CWA, when the wireless guest receives the redictect URL from ISE (URL to access the ISE Guest Portal), this URL is based on the ISE DNS name, not on its IP address; so, the PC can't resolve this via DNS name since there is no DNS in the External zone (for guets) or by using the ISP DNS servers addresses provided by the DHCP server, and, so, it can't access the Guest Portal at all ;
I know that in trying to manually code the IP address - this does not work (ie in the CWA Authorization profile, the equivalent URL redirect via the CISCO av-pair as follows :
cisco-av-pair=url-redirect=https://10.10.10.10:8443/guestportal/gateway?sessionId=sessionIdValue&action=cwa, )
since the sessionIdValue variable is not replaced by its real value when sent to the wireless client)
My question is : Has this issue been addressed in version Cisco ISE 1.2 - has anyone tried it if has been addressed? If not in Cisco 1.2 - does anyone know iof this feature will become available?
Thank-you in advance for your replies.
Robert C.

Robert,
Manual assignment has been made available in ISE 1.2 release.
M.

Cisco ISE 1.2 Guest Portal customization with vWLC redirect

Hello Support Community,
we have a problem regarding customized web authentication on ISE 1.2 with Package ISE12CustomPortalPackage-v4.zip. We have a Virtual Wireless Controller where we do a redirect to ISE. When we use default guest portal on https://x.x.x.x:8443/guestportal/Login.action authentication and authorization works fine. When we do redirect to Cisco templates on https://x.x.x.x:8443/guestportal/portals/example/Login.html customized login page is displayed and after correct authentication guest successful page is displayed but we can't go to any webserver although ISE shows authentication and authorization as successful. When we try to reach a webserver after successful authentication we get redirected to customized login site. Virtual Wireless Controller shows client aus "Webauth Required" after successful authentication. Central Web Authentication isn't possible because we have a different AAA Server for 802.1X and only use wired guest access on a particular VLAN from WLC. Are there any known issues regarding customization template or is there something wrong regarding our redirect?
I hope somebody can help us.
Best Regards
Benjamin

Hello Neno,
1. I attached screenshots below.
2. There is nothing related to this client.
3. I attached Debug below.
We are currently using MAB on our switches as a fallback to our 802.1X on our wired access. Order and Priority currently is 802.1X/MAB/Auth-Fail-VLAN. CWA is based on a failed MAC-Authentication which leads to an Authorization Profile to permit access with Webauth.
If you configure Wired guest access on WLC there isn't a possibility to configure MAC-Authentication.
CWA on our switches isn't possible because we are currently using failed MAC-Authentication to direct clients to our Auth-Fail-VLAN which has restricted access secured by SVI-ACL which allows us HTTP Access to printers (manual Cert Deployment) and automated Cert enrollment to our computers.
Best Regards
Benjamin

Guest portal in distributed setup

Hi All,
How does the guest portal or the sponsor portals work in a distrubuted environment where two or more PSNs are running indivudually. Thats is,
1. does ISE redirects the user to the same guest portal url <PSN1 FQDN>/guestportal or PSN2 FQDN>/guestportal based on which PSN receives the request from a NAD?
2. how do we setup a generic url for the guest so the users will not see the <PSN1 or 2 FQDN> and could see a url like, example abc.com.us/guestportal regardless which POSN serves the request?
Thanks
G

Hi
FYI.
In Cisco ISE distributed deployment, administration and monitoring activities are centralized, and processing is distributed across the Policy Service nodes. Depending on your performance needs, you can scale your deployment. Each Cisco ISE node in a deployment can assume any of the following personas: Administration, Policy Service, and Monitoring. The Inline Posture node cannot assume any other persona, due to its specialized nature. The Inline Posture node must be a dedicated node.
For regarding generic url configuration, please have a look at the following link:
http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_dis_deploy.html#18995

Guest Portal HTML Code

Similar Messages

Maybe you are looking for