onVisit Cisco ISE module - settings on the CISCO side Følg

Settings on the CISCO side 

1. In Cisco ISE, you will need to enable the “ERS API service” setting. 

1. In Cisco ISE, login to your ISE PAN 

1. Go to Administration > System > Settings > ERS Settings 

1. Turn on ERS API by enabling ERS for Read/Write 

1. Save your changes 

1. You will now be able to use the local endpoint “https://<Cisco ISE IP address>:9060/ers/” 
     

1. Create a Sponsor 
   A sponsor is the user's proxy that does the provisioning of the new visitors 

1. In ISE, go to Administration > Identity Management > Identities. 

1. Select “Users” and click “Add” 

1. Give the sponsor a name (Something like “onVisitGuestSponsor”) 

1. Set Status to Enabled 

1. Set Password Type to “Internal Users”. Create a password (you will need this later in step 6) 

1. Assign User Groups. Best practice is “ALL_ACCOUNTS” unless you have a specific reason not to. 
     

1. Create a Guest Type 
   The Guest Type will determine the permissions the visitor will have. 

1. Go to Work Centers > Guest Access > Portals and Components. 

1. Select “Guest Types” and click “Create” 

1. Name the Visitor type to whatever you wish (Something like “onVisitVisitor”) 

1. Set the field “Account duration starts” to “From First Login” 

1. Set the “Maximum account Duration” to however long you want (recommended 1 day) 

1. Set the “Sponsor Groups” to the same group that you assigned to the sponsor in step 2. (Recommended “ALL_ACCOUNTS”) 

1. Go back to Work Centers > Guest Access > Portals and Components and select “Sponsor Groups” and select the group you are using. Make sure this group can create accounts using the Guest Type we just created. 
     

1. Copy the Portal ID 

1. Go to Work Centers > Guest Access 

1. Select “Sponsor Portals” and choose the “Sponsor Portal (default)” unless you have a specific reason to use a custom portal. 

1. Right click on “Portal Test URL” and select “Copy Link Address”. 
   Paste this link somewhere safe to reference later. 
     

1. Copy location name 

1. Go to Work Centers > Guest Access > Settings 

1. Select “Guest Locations and SSID” 

1. Choose your location and copy it and paste the name to same place you pasted the Portal ID