WCS logs for Guest accounts

Hello,
Are there any logs on the WCS that can capture the MAC and IP address of a Guest client ?
The idea is to have this information available in order to correlate it with the Web server logs. It seems that the WCS logs capture only the MAC address
of a Guest client.
Are you aware of any settings for any logs that would enable logging of both the IP and MAC address for guest accounts ?
Thank you in advance
Best Regards,Pan

In 5.2 take a look at the guest user session report:
http://www.cisco.com/en/US/docs/wireless/wcs/5.2/configuration/guide/5_2reps.html#wp1117029
Guest User Sessions Report
The Guest User Sessions report shows historical session data for a guest user such as amount of data passed, login and logout time, the guest IP address, and the guest MAC address.
The session data is available (by default) for one month after the session event occurs. This data retention period is configurable from the WCS background task settings page.
This report can be generated for guest users who are associated to controllers running software version 5.2 and above.

Similar Messages

  • Lobby Ambassador - WCS Logging of Guest Account Creation

    Hello all,
    If I am user "admin-ken" and I setup an guest user account "guestuser1" via the WCS controller templates > Guest User (which takes me into lobby ambassador), is there a log file that indicates that "admin-ken" had setup "guestuser1" guest account?
    Many thx indeed,
    Kind regards,
    Ken

    HiKen,
    Hope all is well :)
    Maybe this is what you are looking for;
    Logging the Lobby Ambassador Activities
    The following activities are logged for each lobby ambassador account:
    •Lobby ambassador login: WCS logs the authentication operation results for all users.
    •Guest user creation: When a lobby ambassador creates a guest user account, WCS logs the guest user name.
    •Guest user deletion: When a lobby ambassador deletes the guest user account, WCS logs the deleted guest user name.
    •Account updates: WCS logs the details of any updates made to the guest user account. For example, increasing the life time.
    Follow these steps to view the lobby ambassador activities.
    Note You must have superuser status to open this window.
    Step 1 Log into the Navigator or WCS user interface as an administrator.
    Step 2 Click Administration > AAA, then click Groups in the left sidebar menu to display the All Groups window.
    Step 3 On the All Groups windows, click the Audit Trail icon for the lobby ambassador account you want to view. The Audit Trail window for the lobby ambassador displays.
    This window enables you to view a list of lobby ambassador activities over time.
    •User: User login name
    •Operation: Type of operation audited
    •Time: Time operation was audited
    •Status: Success or failure
    Step 4 To clear the audit trail, choose Clear Audit Trail from the Select a command drop-down menu and click GO.
    http://www.cisco.com/en/US/docs/wireless/wcs/4.2/configuration/guide/wcsmanag.html#wp1076868
    http://www.cisco.com/en/US/docs/wireless/technology/guest_access/technical/reference/4.1/GAccess_41.html#wp1001609
    Hope this helps!
    Rob

  • Metadata refresh for Guest Account

    Hi All,
    Recently I faced a strange issue.
    I had some changes made at the back-end table data.
    When I logged in as Guest I saw the report reflecting the changes but when one another end user logged in,he was not able to see those changes in the report, Next day he was able to see the desired results.
    Pretty obvious the metadata was not refreshed.
    But why did it happened, how can metadata behave differently for Guest and other users.
    Can someone throw some light at the possible reasons for this issue.
    Is there some predefined mechanism for Cache maintenance for Guest account?
    Thanks in advance,
    Anurag

    Thanks for the response John, but how will one come to know if a old session id has been picked.
    This is something really serious as it may cause unupdated data to be displayed to the user.
    Any possible solutions to prevent this sort of issue from duplicating in future.
    Thanks in advance.
    Anurag

  • Local Authentication for Guest accounts created on WCS

    I'm not sure this is technically possible but I have a requirement to set up an SSID on a WLC whereby I can provision guest user accounts from the WCS and have the WLC / SSID authenticate against the guest account created on the WCS. The SSID would not be a web-auth / layer 3 auth model but preferably be able to utilise layer 2 authentication (802.1x) against the account within WCS. Can anyone tell me if this is actually possible?
    Thanks in advance for your help.
    Cheers
    Sent from Cisco Technical Support iPad App

    Ok then .. Sounds like you are already very fimilar with the wlc..
    Lets kick a few ideas around ..
    If you want to use WCS lobby then you cant use radius, becuase WCS will not update radius accounts. But you could use the WLC as a radius server and store the guest account(s) on the WLC. Gives you 802.1X security, WCS loddy admin access and your guest accounts. You can also expire the accounts as well. So you would move the control from radius to the wlc. You can also apply your qos / bandwidth.
    Another option would be to create radius accounts. Set up your guest wlan, point it to radius. You can still apply a global bandwith restriction within the qos profile on the wlc.
    "Satisfaction does not come from knowing the solution, it comes from knowing why." - Rosalind Franklin
    ‎"I'm in a serious relationship with my Wi-Fi. You could say we have a connection."

  • Settings for guest account

    i admin some macs at the local university's art education. we've got six macs and 45 students. FCS, CS4 and PRO TOOLS, along with various open source software. for the upcoming semester, we've decided that each student is no longer allowed to store their files on the internal disks. the solution i was going for, was using the guest account. each student will no longer log into their account, but hook up their private external disk to save their files to.
    the problem is, i can't configure the looks and behaviors of the guest account. for example, i would like to add the app icons they'll be working with to the dock, i'd like to set the right clicking on the mighty mouse to be a secondary click, separate pro tools shortcuts from osx exposé/dashboard, change privileges to the shared folders etc.
    but every log out / log in, these settings are restored to a default.
    is there any way i can override this default?
    or is there a better way to organize this altogether?

    iColor wrote:
    that's great.
    it seems i cannot actually set all the preferences. like the obvious right secondary mouse click, appearance and energy saving. or could i, clicking 'preferences', then details' and adding something to the list?
    but dock customization is a 'start'.
    if i want to manage accounts on other macines on the local network, what do i enter instead of 'localhost'?
    I don't think you can do this at all unless you run OS X server. I could be wrong and the IP address of the remote computer might work but I never tried that myself.
    i recently bought apple remote desktop, - the workgroup manager seems to be a great addition to that. almost as it should be integrated in it.
    thank you again
    Message was edited by: V.K.

  • Lobby Admin for guest account creation - Automation of account creation

    hello all,
    i'm sure the creation of guest accounts on the lobby admin page is a painful process for all involved - for us, it involves a process like this:
    visitor asks for wifi > receptionist phones IT > IT creates account> IT phones receptionist with login details.
    I would like to know whether it's possible to speed up this process either:
    1) receptionist is able to click a few buttons, type the name of a visitor (so we know who used particular the guest ID), then is able to generate an ID and password immediately, which can then be printed onto a ticket printer of some sort.
    2) visitor simply connects into the guest network, has to register (name and email) and automatically gets connected.
    are any of these possible? or any other option I could take?
    Thanks

    Why not just have the receptionist create the account via the Lobby Admin login?  The point of Lobby Admin is such that an elevated end-user (receptionist/security/etc) can log in to create a guest account without having to interact with an "admin".  There's no point in having your IT staff handle the Lobby Admin logins.
    Some of the other items you are asking for would be a better use-case with Cisco ISE solution.

  • Input layout for Guest Account

    Please gave me some help.
    I need change the default input layout for the guest account.
    In Italy we have two keyboard:
    Italian and Italian Pro
    Now guest begin with Italian Keyboard layout but now we have Italian Pro Keyboard.
    Yes I no that the guest can change in Preference but after log out the next logIn is more the wrong Italian.
    Very boring. I will change the setting one time forever.
    We dont have more keyboard with Italian layout (too old).
    Thanks for your help and sorry for my very bad english.

    Thanks for the advice but these were the roads that I had tried before looking in the forum.
    I have try again.
    sudo "/System/Library/CoreServices/Language Chooser.app/Contents/MacOS/Language Chooser"
    sudo "/System/Library/CoreServices/Setup Assistant.app/Contents/MacOS/Setup Assistant"
    Workgroup Manager from Server Admin Tools
    Unfortunately all of these approaches dont work.
    they can not change the keyboard layout.
    I found also this
    http://discussions.apple.com/messageview.jspa?messageID=13288615&stqc=true
    that is almost the same
    but unfortunately no answer.
    Surely it is written in a file system preference ... but where?
    P.S. Tom you live in Flagstaff, very nice. I was there this summer with my family - wife and son - and was the third time in my life.
    I like very much Arizona, and new mexico, and Colarado, Utha…
    maybe I love all the west with a rent car on the road ... maybe all the USA.

  • Set reverse scroll direction for guest account

    Is there a way to set the default scroll direction to reverse scrolling for the guest account?
    Thanks.

    No: all settings are restored to default when the guest logs out. But you could create a managed account for visitors, with suitable restrictions, then that would hold any setting you made. Of course its contents won't be deleted when they log out, which can be an advantage or a disadvantage depending on circumstances.

  • Changed file viewing settings for Guest account, now iMac won't boot :(

    I'll start this off by mentioning that I'm not really a techie type person, but I'll do my best to describe what I did as accurately as possible. And I'm pretty good at following layman's terms troubleshooint advice!
    I recently decided to move my iMac into the living room of my apartment. I have never found the need to create a Guest account, but I figured it might be convenient for..well, a guest every now and then. But when I created the guest account I discovered very quickly that they would have access to all of my photos, documents, movies, etc. via the "view all documents" "view all photos" tabs on the left-hand side of the Finder window. I googled what to do and people were saying that it is best to change the viewing options of particular folders via the "get info" tab when you right-click on a folder. There were three categories, the first one I believe was Admin or the main user, the second is "wheel" and the third says "Everyone". I changed the "Everyone" access on the folders I wanted private from read-writable to "none". I left the "wheel" and "admin" categories alone. I also did this to the utilities folder, and the library under the assumption it would only affect guest access to these files, not admin access!
    Also, under the Account Preferences tab in the Apple menu I disabled the viewing of shared folders for the guest. I also disabled automatic login.
    Next thing I know, while I'm under the guest login trying to test out my security updates, I see I can't click on anything! Or open anything! I can't open the finder at all, I can't open the internet, I can't even get to the Apple drop-down menu. I couldn't even log out of guest. I had to turn off my computer without shutting it down. I turned it back on, and it went through the motions of booting up until the blue screen with the grey dashed loading circle (no beach ball, thank god). It acts like it will proceed beyond that point, the grey circle disappears for a moment, but then nothing happens and that process starts over. Like it's stuck and can't find it's own files. I also notice a tiny white square in the upper left-hand corner of the blue screen if that means anything.
    I don't know what the heck I did. I think I somehow managed to block my own admin access (is that even possible??).
    -Shayna

    You need to get the install discs, erase the hard drive, and reinstall all the software from scratch. When acquiring a used Mac there's no way to know what condition its software is in... there might be hacks, security holes, pirated software, keyloggers, credit card sniffers, or other even riskier stuff on it. Using a pre-owned Mac's software as-is is a Very High Security Risk. Your Mac's software is obviously distressed. What's more, you are not licensed to use any Apple software unless you own and are in possession of the install discs.
    Get the discs and reinstall. Apple will send you new ones that match your model for a small shipping fee. Call them and provide your Mac's serial number.

  • Selective exemptions for guest account automatic reset/erasure

    I have the guest account enabled on my MacBook Pro, and have been generally thrilled with the automatic resetting/erasure that occurs when the account is logged off. I have now come across a singular program which I would prefer kept its settings after guest account log off. Is there any way to exempt this one program from losing its settings/data?
    - THOR

    pd_THOR wrote:
    I have the guest account enabled on my MacBook Pro, and have been generally thrilled with the automatic resetting/erasure that occurs when the account is logged off. I have now come across a singular program which I would prefer kept its settings after guest account log off. Is there any way to exempt this one program from losing its settings/data?
    no. there is no way to do that. the whole guest account home directory with all preference files is erased on logout. there is no way around that. don't use the guest account if you want to keep something.
    - THOR

  • Finder prefs for Guest Account

    I'm trying to ensure that anyone who uses the guest account on my MacBook cannot see my external drives when they are connected. However, while I can set the Finder prefs to do that in that account, these prefs don't "stick" when I log out -- which is, of course, the beauty of the guest account.
    I do want to see the external drives (backups) in my own account, but I want them invisible in the guest account. Is there any way to do that?
    Thanks!

    you can achieve a fair degree of customization of the guest account using Workgroup Manager.
    Workgroup Manager is part of the [Server Admin Tools|http://www.apple.com/downloads/macosx/apple/macosx_updates/serveradmintoo ls105.html] but it can be installed on client versions too. of course, if you run OS X server you should have it already.
    Once you install Server Admin Tools, start Workgroup manager and enter localhost in the address field and enter you admin name and password. select Guest account, go to preferences->media access. set the access as you like it.

  • Logging into guest account requires network key?

    Airport Extreme guest account login from my Windows XP laptop requires a network key and not a password as I expected.  Anyone know why and how to fix this?  Thank you.

    Everything up to date on the XP machine? 
    If you are using WPA2 Personal, or WPA/WPA2 Personal security on the Guest Network, then your normal "password" of 8 characters or more should work.
    If the XP machine really does require the "key", which is a long code of numbers and letters, you can locate that on your Mac as follows:
    Open Macintosh HD > Applications > Utilities > AirPort Utility
    Click Manual Setup
    Do NOT look at the AirPort Utility window in the center portion of the screen
    Look up to the very top of the computer screen to locate the AirPort Utility menu items to the right of the Apple icon
    Click the Base Station menu
    Click Equivalent Network Password and the "key" will be displayed for both your "main" and "guest" networks
    You might want to note that when you enable the Guest Network, the bandwidth is split between your Main and Guest Networks, so you would only want to enable the Guest Network when you really have "guests"

  • How to change the picture for guest account that was created by "find my mac"? Is it possible to change the photo?

    I want to change the picture to my guest account that was created by "find my mac." I tried using the workspace type program but it did not recognize my guest account.  I am not sure what to do and need some help. Thanks!

    I don't think there is a straight-forward way to do this. However, if the guest account is bothering you, you can disable it from within the System Preferences.

  • Parse Security Logs for User Account logon Computer Name

    Greetings,
    I was recently tasked with creating a list of user accounts and the computer in which they logged onto.  Unfortunately, we do not have time to use the logon script method.   I believe we can achieve this goal using software similar to LANSweeper
    however not all computers will be turned on at a given time and I believe this application gathers it's information from the client PC.  One possible solution I see is parsing the data from our domain controllers Security Logs / Successful Logons however
    this is proving to be a challenge. Any suggestions?  
    Thanks,
    Chris

    Hi Chris,
    I was recently tasked with creating a list of user accounts and the computer in which they logged onto.
    I believe we can achieve this goal using software.
    There is no built-in tool to complete this task.
    However, we can configure event log trigger to send email when specific logon events are generated.
    Here are some related articles below for you:
    Getting event log contents by email on an event log trigger
    http://blogs.technet.com/b/jhoward/archive/2010/06/16/getting-event-log-contents-by-email-on-an-event-log-trigger.aspx
    Send an email when an event is logged
    http://blogs.iis.net/rickbarber/archive/2012/10/26/send-an-email-when-an-event-is-logged.aspx
    Best Regards,
    Amy
    Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • URL Logging for Guest Traffic using Guest Anchor and ISE

    Hi there all,
    I'm looking for a solution whereby I can log URL information for wireless guest users to ISE. The anchor WLC sits in a DMZ behind an ASA and the ISE is on the internal network. I found this document (see URL below) which is similar but using a NAC Guest Server and not an ISE.
    I'm wondering if anyone has managed to do this using ISE?
    http://www.cisco.com/en/US/products/ps6128/products_configuration_example09186a0080ac2fda.shtml#wlcc

    Hi, Sorry for the late reply, I have been busy with a Proof Of Concept with the ISE.
    I have tried your suggestion and I cannot get the same results as you.
    I notice that the logs in your report were generated by an ASA. Do you know whether the same can be done with a switch dACL?
    i have this configuration...
    dACL
    3k-access#sh ip access-list int fa0/1
         permit udp host 10.1.10.103 any eq domain
         permit icmp host 10.1.10.103 any
         permit tcp host 10.1.10.103 host 10.1.100.21 eq 8443
         permit tcp host 10.1.10.103 host 10.1.252.10 eq www log-input
         deny ip host 10.1.10.103 10.1.0.0 0.0.255.255
         permit ip host 10.1.10.103 any
    Logging config...
    logging esm config
    logging trap debugging
    logging origin-id ip
    logging host 10.1.100.21 transport udp port 20514
    with the above onfiguration, I get a report which shows the syslog messages of successful authentication and download of the dACL, but then when I access a URL, i do not see any events about the URL that was accessed or even the IP that was accessed.
    DO you know if this can be done? maybe I am looking at the wrong report? Can you help?
    Mario

Maybe you are looking for