Security

Reply
Regular Contributor II

Can I limit to only one device when a user connects on my EAP-PEAP ssid?

Hi Forum,

 

Can AuthorizationEndpoint>>Unique_device_count>>GreaterThan>>1   then deny access profile

Do the trick?

 

 

Thanks in advance,

Aruba

Re: Can I limit to only one device when a user connects on my EAP-PEAP ssid?

Yes but you need to put the endpoints repository it the authorization sources
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Regular Contributor II

Re: Can I limit to only one device when a user connects on my EAP-PEAP ssid?

Sounds good. I will try tomorrow and give you a Kudos.

Regular Contributor II

Re: Can I limit to only one device when a user connects on my EAP-PEAP ssid?

I did exactly this and it did not work. My controller had 0 users when I connected and all 3 devices were able to connect to eap-peap SSID and get an IP address. For testing -see below- I want to deny access if you are on more than one device with AD credentials.

Screen Shot 2015-08-17 at 7.51.37 AM.png

Occasional Contributor II

Re: Can I limit to only one device when a user connects on my EAP-PEAP ssid?

Have you added the Clearpass in the Accounting Group of the AAA profile of the controller configuration?

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: