Security

Dear all,

We have Aruba 3600 controller with 6.3.1.6 OS and several AP105 access points. When users choose Guest SSID, they will be prompted with the Captive Portal to enter username & password. I would like few computers (MAC Address) to by pass this authentication.

 

Under Security > Authentication > User Rules I have added a rules with the MAC Address of the computer that needs to be bypassed.

Under Security > Authentication > Profiles >> Guest Wi-Fi profile I have selected the above rule for the User derivation rules dropdown.

The particular device still pops to enter username and the password, Have I missed anything ?

Any help would be much appreciated, thank you.

 

In your UDR you need to change the role to something else that is not the x-logon user-role, use the authenticated or create a new one 

---

@bickyz wrote:

Dear all,

We have Aruba 3600 controller with 6.3.1.6 OS and several AP105 access points. When users choose Guest SSID, they will be prompted with the Captive Portal to enter username & password. I would like few computers (MAC Address) to by pass this authentication.

 

Under Security > Authentication > User Rules I have added a rules with the MAC Address of the computer that needs to be bypassed.

Under Security > Authentication > Profiles >> Guest Wi-Fi profile I have selected the above rule for the User derivation rules dropdown.

The particular device still pops to enter username and the password, Have I missed anything ?

Any help would be much appreciated, thank you.

 

---

Make sure you delete the user from the user table to trigger the rule:

 

aaa user delete mac <mac address of user>

You gave the device the logon role in your UDR. That needs to be your final access role.

Sent from Nine

Thank you everyone, I have changed the UDR role value to "authenticated". Now the particular device (MAC address) is auto authenticated. Devices without the MAC addresses on the rules will be prompted with the Captive Portal and has to enter valid username/password.

 

Is there any way to import the bulk list of MAC addresses ?

 

thank you very much.

Here you go:
http://community.arubanetworks.com/t5/Wireless-Access/importing-CSV-file-to-internal-DB/m-p/78152/highlight/true#M2488

Hi, I want to import the list of MAC Addresses, not a user account. And on the Security > Authentication > User Rules I cannot find an option to import.

 

thank you

That's not possible

Build an excel sheet that concats the commands and paste into controller.

Hi,

What is the command to add the mac address and assign "authenticated" role

 

thank you.

aaa derivation-rules user [udr name] set role condition macaddr equals [MAC address] set-value [role name]

Sent from Nine

local-userdb add username <MAC_ADDRESS> password <MAC_ADDRESS> role <ROLE_NAME>