Monitoring, Management & Location Tracking

Getting Usernames from Steel Belted RADIUS into AMP

Aruba Employee

The following is a work in progress describing part of the steps that need to be taken to get AMP to get username information from Steel Belted RADIUS.

--------------------------------------------------------------

It's possible to have Steel Belted RADIUS issue SQL statements to AMP's database every time a user connects so that the usernames can be captured in AMP. 

The statement below assumes the MAC address format received is
xxxx.xxxx.xxxx.

SQL = update vpn_user set username=%FullName, login_time=now() where
mac=substring(@Calling-Station-ID from 1 for 2) || ':' ||
substring(@Calling-Station-ID from 3 for 2) || ':' ||
substring(@Calling-Station-ID from 6 for 2) || ':' ||
substring(@Calling-Station-ID from 8 for 2) || ':' ||
substring(@Calling-Station-ID from 11 for 2) || ':' ||
substring(@Calling-Station-ID from 13 for 2);

OTHER STUFF THAT NEEDS TO BE SET UP:
1. AMP to accept ODBC Connections.
2. The Data Accessor API within SBR. Documented in the SBR Administration Guide, which is linked here: http://www.juniper.net/techpubs/software/aaa_802/sbr.html

Version history
Revision #:
1 of 1
Last update:
‎06-09-2014 09:55 AM
Updated by:
 
Labels (1)
Contributors
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: 
Is this a frequent problem?

Request an official Aruba knowledge base article to be written by our experts.