AAA, NAC, Guest Access & BYOD

Reply
Occasional Contributor II
Edcarlos
Posts: 12
Registered: ‎06-16-2009
Accepted Solution

MAC Address authentication

Hi experts.

 

I have two SSIDs to old devises that authentic by MAC Address. Theses old devices can authenticate in both SSIDs, but I would like to set different roles for each SSID.

 

My issue is:

The user authentication is done by MAC address that uses the internal database. When I create a user (MAC Address) in the internal database, is assigned a default role for this user, as guest.

 

So, this user uses the guest role for both SSIDs.  Is there way to configure a default role for a VAP as is done in others authenticate modes?

 

Thank you

Moderator
cjoseph
Posts: 12,181
Registered: ‎03-29-2007

Re: MAC Address authentication

In the mac address authentication profile, you can specify a format.  Part of the format is Delimiter, or none, colon or dash.  For one SSID make the mac authentication profile have no delimeter, so that the mac addreses will have to format AABBCCDDEEFF.  The other SSID will have  a mac authentication profile that has a delimeter of Colon, so you will enter those mac addresses of AA:BB:CC:DD:EE:FF.

 

The end result is tht devices will authenticate with a different format, depending on the SSID that they connect to, and you have to enter them into the internal database differently, as a result.

Colin Joseph
Aruba Customer Engineering
Occasional Contributor II
Edcarlos
Posts: 12
Registered: ‎06-16-2009

Re: MAC Address authentication

Thank you very much! Cjoseph.

Moderator
cjoseph
Posts: 12,181
Registered: ‎03-29-2007

Re: MAC Address authentication

An engineer from Texas told me this idea about two months ago.  I cannot take credit for it.

 

Colin Joseph
Aruba Customer Engineering
Search Airheads