AAA, NAC, Guest Access & BYOD

Introduction :

This article talks about creating a unique service for 802.1X authentication in an environment where we have multiple authentication sources.

Feature Notes :

This applies to all the versions of CPPM.

Environment :

Lets consider that we have 25 authentication sources. Each being a single child domain ( Active Directory). We have multiple campus and users part of all the domains roam across different campus.

Configuration Steps :

Answer :

So how do we create a unique service?

As we are in multiple child domain environment, one user may be part of multiple domains.

So users will be recommended to login using the complete domain name ( user@aruba.com or aruba/user).

Configuration:

1: Create a basic 802.1X service using the template.
2: Make multiple copies of the same service.( one for each authentication source)
3: Add one AND condition in each service as shown below.


" Authentication:Full-Username = <Value>" 

The generic service will look like below.





We will add one more condition under Service Rule as shown below.



Make sure to add that AD server as authentication source in this which is mentioned in the new rule.


We will have to create multiple services to handle authentication request for each authentication source.

Verification :

Test with multiple clients and verify that correct service is hit.