Security

Reply
Regular Contributor II
Posts: 207
Registered: ‎09-11-2013

Can I limit to only one device when a user connects on my EAP-PEAP ssid?

Hi Forum,

 

Can AuthorizationEndpoint>>Unique_device_count>>GreaterThan>>1   then deny access profile

Do the trick?

 

 

Thanks in advance,

Aruba
Posts: 1,520
Registered: ‎06-12-2012

Re: Can I limit to only one device when a user connects on my EAP-PEAP ssid?

Yes but you need to put the endpoints repository it the authorization sources
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Regular Contributor II
Posts: 207
Registered: ‎09-11-2013

Re: Can I limit to only one device when a user connects on my EAP-PEAP ssid?

Sounds good. I will try tomorrow and give you a Kudos.

Regular Contributor II
Posts: 207
Registered: ‎09-11-2013

Re: Can I limit to only one device when a user connects on my EAP-PEAP ssid?

I did exactly this and it did not work. My controller had 0 users when I connected and all 3 devices were able to connect to eap-peap SSID and get an IP address. For testing -see below- I want to deny access if you are on more than one device with AD credentials.

Screen Shot 2015-08-17 at 7.51.37 AM.png

Occasional Contributor II
Posts: 14
Registered: ‎11-07-2013

Re: Can I limit to only one device when a user connects on my EAP-PEAP ssid?

Have you added the Clearpass in the Accounting Group of the AAA profile of the controller configuration?

Search Airheads
Showing results for 
Search instead for 
Did you mean: