Controller Based WLANs

Why are the machine name and string changed when EAP termination is done?

Product and Software: This article applies to all Aruba controllers and ArubaOS 3.3.2.x and later.

 

The machine name and string is changed when EAP termination is done, so termination is not done on the controller when machine authentication is involved.


The Aruba Controller did not change the machine name and string. IAS performs the lookup and translates the user name from "host\ahejnar-T43.hejnar.com" to "Domain\Hostname-without-domain$" format.

On the other hand, if IAS is terminating the EAP, IAS can look up the computer account location inside A/D(LDAP).

The name format that is appended with $ is the actual one for MSChapv2.

However, it is known limitation that IAS does not allow plain-mschapv2 for machine authentication. Use either Juniper SBR or FreeRADIUS.

 

1262 image 001

1262 image 002

Version history
Revision #:
1 of 1
Last update:
‎07-03-2014 10:44 AM
Updated by:
 
Labels (1)
Contributors
Search Airheads
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.