Security

Reply

Advertisement with a mac cached user

Hello

IT is possible for clearpass to have users, use the mac cachin so that they dont have to put user and password again but that they get an advertisement everytime they  mac authenticate or something like that?

Or sending them to a landing page ?

Something like they remenber the user and they dont need to put user name and password but i can still send the advertisement when they start using the wifi?

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Guru Elite

Re: Advertisement with a mac cached user

Yes, just return a different role with a captive portal attached.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480

Re: Advertisement with a mac cached user

A captive portal that does not need to authenticate you mean?but that have the advertisement?

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Guru Elite

Re: Advertisement with a mac cached user

You’ll still need to authenticate using an anonymous account to get the user out of the captive portal state.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480

Re: Advertisement with a mac cached user

But if i use an annonymous user i wont be able to see that user listed on airwave or anythingl ike that.

 

What the client would like is this

 

I log in with my credentials

cdelarosa@alternetworks.net

 

I get my advertisement

 

I can browse in the internet

 

the next day i connect again to the wifi but this time i dont need to put my username and password but i still get the advertisement

 

Also i can see the user cdelarosa@alternetworks.net on airwave  not an annonymous user

 

Is this possible?

 

Cheers

Carlos

 

 

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Guru Elite

Re: Advertisement with a mac cached user

You just override the username in the RADIUS response.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Guru Elite

Re: Advertisement with a mac cached user

At a high leve, you would have to setup mac caching with captive portal that stores the mac address in the endpoint database and the username of the user in a field called "username" along with that entry in clearpass.
 
When the user returns later, the controller would mac authenticate to clearpass to bypass the captive portal and in the enforcement policy, return the username as the username field obtained when the user first authenticated to the captive portal.
 
In your mac caching service in clearpass that would do the mac authentication,you can simply return "RADIUS:IETF:User-Name EQUALS %{Endpoint:Username}" in your RADIUS response.
 


Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: