Security

Reply
Occasional Contributor II
Posts: 15
Registered: ‎05-10-2014

Aruba Controller - Mac authentication for Guest Wi-Fi

Dear all,

We have Aruba 3600 controller with 6.3.1.6 OS and several AP105 access points. When users choose Guest SSID, they will be prompted with the Captive Portal to enter username & password. I would like few computers (MAC Address) to by pass this authentication.

 

Under Security > Authentication > User Rules I have added a rules with the MAC Address of the computer that needs to be bypassed.

aruba-06jan16-01.png

Under Security > Authentication > Profiles >> Guest Wi-Fi profile I have selected the above rule for the User derivation rules dropdown.

aruba-06jan16-02.png

The particular device still pops to enter username and the password, Have I missed anything ?

Any help would be much appreciated, thank you.

 

MVP
Posts: 4,114
Registered: ‎07-20-2011

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

In your UDR you need to change the role to something else that is not the x-logon user-role, use the authenticated or create a new one 

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Guru Elite
Posts: 20,410
Registered: ‎03-29-2007

Re: Aruba Controller - Mac authentication for Guest Wi-Fi


bickyz wrote:

Dear all,

We have Aruba 3600 controller with 6.3.1.6 OS and several AP105 access points. When users choose Guest SSID, they will be prompted with the Captive Portal to enter username & password. I would like few computers (MAC Address) to by pass this authentication.

 

Under Security > Authentication > User Rules I have added a rules with the MAC Address of the computer that needs to be bypassed.

aruba-06jan16-01.png

Under Security > Authentication > Profiles >> Guest Wi-Fi profile I have selected the above rule for the User derivation rules dropdown.

aruba-06jan16-02.png

The particular device still pops to enter username and the password, Have I missed anything ?

Any help would be much appreciated, thank you.

 


Make sure you delete the user from the user table to trigger the rule:

 

aaa user delete mac <mac address of user>



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite
Posts: 8,036
Registered: ‎09-08-2010

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

You gave the device the logon role in your UDR. That needs to be your final access role.

Sent from Nine

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Occasional Contributor II
Posts: 15
Registered: ‎05-10-2014

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

Thank you everyone, I have changed the UDR role value to "authenticated". Now the particular device (MAC address) is auto authenticated. Devices without the MAC addresses on the rules will be prompted with the Captive Portal and has to enter valid username/password.

aruba-06jan16-03.png

 

Is there any way to import the bulk list of MAC addresses ?

 

thank you very much.

MVP
Posts: 4,114
Registered: ‎07-20-2011

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

Here you go:
http://community.arubanetworks.com/t5/Wireless-Access/importing-CSV-file-to-internal-DB/m-p/78152/highlight/true#M2488
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II
Posts: 15
Registered: ‎05-10-2014

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

Hi, I want to import the list of MAC Addresses, not a user account. And on the Security > Authentication > User Rules I cannot find an option to import.

 

thank you

MVP
Posts: 4,114
Registered: ‎07-20-2011

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

That's not possible
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Guru Elite
Posts: 8,036
Registered: ‎09-08-2010

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

Build an excel sheet that concats the commands and paste into controller.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Occasional Contributor II
Posts: 15
Registered: ‎05-10-2014

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

Hi,

What is the command to add the mac address and assign "authenticated" role

 

thank you.

Search Airheads
Showing results for 
Search instead for 
Did you mean: