In clearpass when you set up the Guest services you can use the service templates and use
It will create two services. One for the first time they hit the captive portal and One for when they get disconnected and reconnect.
Here is what the MAC auth service looks like..