Q: MAC Authentication on guest SSID with guest-type users from internal server on Instant 4.2
A: This article applies to Instant 4.2 and above.
Before 4.2
- For both Guest and Employee type SSID, with mac authentication and Internal server, when client do mac auth, IAP use employee type user.
- If choose none splash page in Guest SSID, mac authentication is unavailable.
In 4.2
- For Guest SSID with mac authentication and Internal server, when client do mac auth, IAP will use guest type user.
- If choose none splash page in Guest SSID, mac authentication can be enabled or disabled.
For Guest SSID mac authentication, add mac address to Internal database, choose “Guest” type.
- If choose “None” Splash page for Guest SSID, MAC authentication can be enabled
For Guest SSID mac authentication, add mac address to Internal database
24:DE:C6:CB:16:C0 (config) # user 3ca9f442783c 3ca9f442783c portal
24:DE:C6:CB:16:C0 (config) # end
24:DE:C6:CB:16:C0# commit apply
From security debug syslog, add “Filter-Id: MAC-GUEST” attribute in mac auth request
rc_server.c:1862] NAS-IP-Address: 127.0.0.1
[rc_server.c:1862] NAS-Port-Id: 0
[rc_server.c:1862] NAS-Port-Type: 19
[rc_server.c:1862] User-Name: 3ca9f442783c
[rc_server.c:1866] Password: *****
[rc_server.c:1862] Service-Type: Call-Check
[rc_server.c:1862] Calling-Station-Id: 3ca9f442783c
[rc_server.c:1862] Called-Station-Id: 9c1c12c81dda
[rc_server.c:1862] Filter-Id: MAC-GUEST
[rc_server.c:1862] Aruba-Essid-Name: guest-ecp-mac
[rc_server.c:1862] Aruba-Location-Id: 9c:1c:12:c8:1d:da
[rc_server.c:1862] Aruba-AP-Group: instant-C8:1D:DA