Hi All,
If possible, I'd like to obtain some input around the management of expiring Guest accounts within Clearpass.
We're currently running Aruba OS 6.3.1.16 and Clearpass 6.5.2 providing both Open and Dot1x networks for Guest and Staff BYOD users.
What I'd like to investigate is whether Clearpass is able to utilise Insight to look at the account lifetime and then pick out accounts which are due to expire within a week. If the match is made, upon authentication, an attribute is passed back to the controller to place the user into a role which presents them with an expiry warning web page upon initial browsing. The user can click continue on this page and is then dropped into their authenticated role and can continue browsing the internet.
So I guess the questions I'm looking to answer are;
- Can Clearpass utilise Insight in this way to allow us to pass back an attribute to place the user into this expiry role ?
- By using a captive portal profile on the expiry role, can a web page be presented to the user that can then provide a link to allow the user to continue working?
- Could this be tied into an Open Network and a Dot1x network?
Any thoughts on this would be greatly appreciated. If i'm missing something quite obvious that would stop this in it's infancy please do let me know. Just in case I'm going down a bit of a rabbit hole here!