Controller-less WLANs

MAC Authentication on guest SSID with guest-type users from internal server on Instant 4.2

Aruba Employee
Q:

MAC Authentication on guest SSID with guest-type users from internal server on Instant 4.2



A:

This article applies to Instant 4.2 and above.

Before 4.2

  • For both Guest and Employee type SSID, with mac authentication and Internal server, when client do mac auth, IAP use employee type user.
  • If choose none splash page in Guest SSID, mac authentication is unavailable.

In 4.2

  • For Guest SSID with mac authentication and Internal server, when client do  mac auth, IAP will use guest type user.
  • If choose none splash page in Guest SSID, mac authentication can be enabled or disabled. 

For Guest SSID mac authentication, add mac address to Internal database, choose “Guest” type.

 

 

  • If choose “None” Splash page for Guest SSID, MAC authentication can be enabled

 

 

For Guest SSID mac authentication, add mac address to Internal database

 

24:DE:C6:CB:16:C0 (config) # user 3ca9f442783c 3ca9f442783c portal

24:DE:C6:CB:16:C0 (config) # end

24:DE:C6:CB:16:C0# commit apply

 

From security debug syslog,  add “Filter-Id: MAC-GUEST” attribute in mac auth request

 

rc_server.c:1862]  NAS-IP-Address: 127.0.0.1

[rc_server.c:1862]  NAS-Port-Id: 0

[rc_server.c:1862]  NAS-Port-Type: 19

[rc_server.c:1862]  User-Name: 3ca9f442783c

[rc_server.c:1866]  Password: *****

[rc_server.c:1862]  Service-Type: Call-Check

[rc_server.c:1862]  Calling-Station-Id: 3ca9f442783c

[rc_server.c:1862]  Called-Station-Id: 9c1c12c81dda

[rc_server.c:1862]  Filter-Id: MAC-GUEST

[rc_server.c:1862]  Aruba-Essid-Name: guest-ecp-mac

[rc_server.c:1862]  Aruba-Location-Id: 9c:1c:12:c8:1d:da

[rc_server.c:1862]  Aruba-AP-Group: instant-C8:1D:DA

 

 

Version history
Revision #:
2 of 2
Last update:
‎07-30-2015 06:01 AM
Updated by:
 
Labels (1)
Contributors
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.