AAA, NAC, Guest Access & BYOD

How To: AirGroup for Guest Users

Community Administrator
Community Administrator

How-To: AirGroup for Guest Users

 

One of the major issues with using AirGroup for Guest Users is that once a Guest User changes over to MAC Caching, the username for that user is the device's MAC Address. Here is how to fix that.

Create a new enforcement profile called MAC-Auth-Update-Username with a type of RADIUS Based Enforcement (In CPPM->Configuration->Enforcement->Profiles->Add Enforcement Profile).

Add an Attribute to match the following:

MAC-Auth-Update-Username-Policy.png

Then add that enforcement to profile to your MAC Auth enforcement policy:

 

MAC-Auth-Update-Username-Policy.png

That's it. Now your guest's usernames will show up in the show user-table, even when they are MAC Caching:

(Pod5) #show user-table
 
 
Users
-----
    IP            MAC            Name              Role                            Age(d:h:m)  Auth  VPN link  AP name       Roaming   Essid/Bssid/Phy                       Profile                      Forward mode  Type     Host Name
----------   ------------       ------             ----                            ----------  ----  --------  -------       -------   ---------------                       -------                      ------------  ----     ---------
122.17.3.60  28:18:78:c5:2c:aa                     EBC-EDU-Guest-guest-logon       00:00:52                    EBC-Pod5-AP1  Wireless  EBC-EDU-Guest/6c:f3:7f:ee:f1:83/g-HT  EBC-EDU-Guest-aaa_prof tunnel        Windows
122.17.3.29  b8:e8:56:42:5e:aa                     authenticated                   00:00:01                    EBC-Pod5-AP1  Wireless  EBC-DEMO/6c:f3:7f:ee:f1:90/a-VHT      EBC-DEMO-aaa_prof            tunnel        OS X     Zachs-MacBook-Pro
122.17.3.65  f0:6b:ca:db:dc:aa                     authenticated                   00:01:10                    EBC-Pod5-AP1  Wireless  EBC-DEMO/6c:f3:7f:ee:f1:80/g-HT       EBC-DEMO-aaa_prof            tunnel        Android
122.17.3.47  a0:ed:cd:ea:8f:aa                     authenticated                   01:01:46                    EBC-Pod5-AP1  Wireless  EBC-EDU-PSK/6c:f3:7f:ee:f1:92/a-HT    EBC-EDU-PSK-aaa_prof         tunnel        AppleTV  EBC-EDU-AppleTV
122.17.3.51  30:10:e4:d6:44:aa  zjennings@test.com authenticated                   00:00:11    MAC             EBC-Pod5-AP1  Wireless  EBC-EDU-Guest/6c:f3:7f:ee:f1:93/a-HT  EBC-EDU-Guest-aaa_prof tunnel        iPad
122.17.3.23  94:44:52:60:6f:aa                     authenticated                   01:00:23                    EBC-Pod5-AP1  Wireless  EBC-DEMO/6c:f3:7f:ee:f1:90/a-HT       EBC-DEMO-aaa_prof            tunnel
 
 
User Entries: 6/6
 Curr/Cum Alloc:7/226 Free:3/219 Dyn:10 AllocErr:0 FreeErr:0

 

Version history
Revision #:
3 of 3
Last update:
‎09-25-2014 01:25 PM
Updated by:
 
Labels (1)
Contributors
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.