Security

 View Only

  • 1.  Clearpass Guest - How to restrict Sponsor/Operator guest creation to 1 day, 1 week and 1 month

    Posted 24 days ago

    The customer has a parallel Cisco ISE installation, where it's possible for a Sponsor to Create a guest accounts that lasts 1 day, 1 week or 1 month, dependent of the need.

    I have created an operator profile that is used, but I cannot set anything here relating to expiration date.

    Is it Under "guest manager" i need to edit. And also is it "1 rule fits them all"?. Would be nice I can configure different values e.g. and depenepending on the person that logs ind, have dem chose either all or only a subset



  • 2.  RE: Clearpass Guest - How to restrict Sponsor/Operator guest creation to 1 day, 1 week and 1 month

    Posted 24 days ago

    So i fired out how to Set account expiration

    But I cannot see where I limit account activation to e.g. Now (ill. as NU)

    Also there does not seem to be a place to where I can set what guest sponsor can set what lifetime options. It seems to be one place and one place only to set it for all


    Original Message


  • 3.  RE: Clearpass Guest - How to restrict Sponsor/Operator guest creation to 1 day, 1 week and 1 month

    Posted 22 days ago

    Thomas, you can select a 'form' in the operator profile that will be used instead of the default:

    Knowing that, it's trivial... duplicate the create_user form, modify the fields (override, not change base field) to match whatever expiration/do_expire/other field you want to modify and assign the modified form to the operator role. In this way you can change the behavior in nearly everything you can think of, and have different options/view/look-feel per operator role.

    If you can't find the options after reading the documentation and other available information, it may be good to work with TAC.



    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------

    Original Message


Related Content