Security

Hi All,

I have just configured CPPM guest with self-sponsor meaning the users have to validate their email within 10 minutes then they get one day of access.  

The way their access is updated is in the self-registration page setting the value 1d in Extend Expiration section.

How would I configure certain email domains to get 30 days of access on CPPM and a different role set on them?

Please can advise

Thanks,

How did you end up configuring this free 10m access etended to 1 day? I do a similar thing but am having issues with enforcing the 10m. Trying to do a session-timeout but I can't get the disconnect to work right. Sorry to piggyback your question, don't have answer for your question.

Did you follow any sort of guide?

Please see the attached guide that I was using to configure this. 

Hope this helps for you.

Attachment(s)

Self Sponsored guest access configuration.docx   674 KB 1 version

I had issue getting the disconnect to work where if the user confirmed their account, when the 5m went by, they kept getting sent back to the pre-auth role instead of being kept in the authenticated role.

Did you run into this issue?

I didn't run into this specific issue.

You need to make sure the guest account gets updated otherwise it will get disconnected after 5 mins. 

I ended up getting it working. The guide is pretty good but is missing a few things. Great workflow though.

Glad that you got it working. If you could please let me know what things are missing from the guide just in case I have the same issues in the future?

I just realized that I used a different guide to achieve the same thing. I had trouble getting yours to work. I used this guide:

https://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-configure-self-sponsored-guest-access-with-5-minutes-of/ta-p/348126

However, that guide is not really clear about the MAC caching service and the profile configuration.