Reply
MVP
boneyard
Posts: 615
Registered: ‎11-30-2011
Accepted Solution

ClearPass as radius server for controller guest users

Im trying to configure the ClearPass as the radius server for the guest users database for web authentication. it works fine as radius server for dot1x, but for the guest users something fails.

when i check the log it gives this at alert:

Error Code: 216
Error Category: Authentication failure
Error Message: User authentication failed
 Alerts for this Request
RADIUS     Cannot select appropriate authentication method

which makes some sense i guess because this isn't EAP TLS or such, but still it should be possible right? is there anything i need to configure on the aruba controller?

Moderator
cjoseph
Posts: 12,032
Registered: ‎03-29-2007

Re: ClearPass as radius server for controller guest users

Under Authentication TAB, allow PAP.

Colin Joseph
Aruba Customer Engineering
MVP
boneyard
Posts: 615
Registered: ‎11-30-2011

Re: ClearPass as radius server for controller guest users

in the ClearPass profile I assume? at Authentication Methods?

Moderator
cjoseph
Posts: 12,032
Registered: ‎03-29-2007

Re: ClearPass as radius server for controller guest users

Configuration> Services> Click on your service used to authenticate those users.  Under Authentication, make sure PAP appears, or add it if it doesn't.

 

Colin Joseph
Aruba Customer Engineering
MVP
boneyard
Posts: 615
Registered: ‎11-30-2011

Re: ClearPass as radius server for controller guest users

thanks cjoseph, that worked.

 

first there was another alert about something with user bindings (tdc-01 - tdc-01.test.loc: Bind as user failed), but after double checking everything it didn't occur anymore and now it works fine.