Security

Reply
MVP
Posts: 498
Registered: ‎04-03-2007

Aruba-Mdps-Provisioning-Settings syntax

I'm trying to, upon Onboard Pre-Auth, point a user/device to a specific provisioning settings (that is tied to different root CAs) based upon the MAC address of the device. I believe I can use the Radius:Aruba:Aruba-Mdps-Provisioning-Settings attribute, however I seem to not be getting the syntax right.

 

Has anyone used this? or is there a more preferred way of doing what I'm describing?

==========
Ryan Holland, ACDX #1 ACMX #1
The Ohio State University
Guru Elite
Posts: 8,320
Registered: ‎09-08-2010

Re: Aruba-Mdps-Provisioning-Settings syntax

Is this dual or single SSID onboard?

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 498
Registered: ‎04-03-2007

Re: Aruba-Mdps-Provisioning-Settings syntax

Single-SSID.

Major Caveat is that we can't have users redirected via user-role to the web page; they'll need to navigate to it from links off other means. The reason for this is that we're trying to check for business vs. personally owned devices, and in order to do the former approach, we'd have to have all the tens of authorization sources that would help delineate business|personal included with our standard 802.1X authentication. Given that we do 8 million auths a day, we can't afford to have all those sources hit that much.

Thus, we're looking to perform the lookup to delineate business|personal during the web-auth/pre-auth part of onboarding.

- Ryan -
==========
Ryan Holland, ACDX #1 ACMX #1
The Ohio State University
Search Airheads
Showing results for 
Search instead for 
Did you mean: