Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass Guest Receipt options

This thread has been viewed 2 times
  • 1.  ClearPass Guest Receipt options

    MVP
    Posted May 21, 2015 04:28 PM

    I'm hoping this will be an easy question.

     

    Guest connects to WLAN and gets redirected to registration page. We want the guest to decide how they want to receive their receipt. For example, maybe a set of checkboxes that has "SMS, Email, None". Guest checks the ones they want, or none does not send one at all. 

     

    Something like this possible? Doesn't have to be exactly like that, but that may help.

     

    Thanks.



  • 2.  RE: ClearPass Guest Receipt options

    EMPLOYEE
    Posted May 21, 2015 04:31 PM
    You could add a custom field and then in the auto sms and auto smtp field, write a valid stir argument that checks the status of your custom field.


    Thanks,
    Tim


  • 3.  RE: ClearPass Guest Receipt options

    MVP
    Posted May 21, 2015 04:34 PM

    Would you have an example of that, I'm going to start building it out, but not sure if I will get 100% accurate.



  • 4.  RE: ClearPass Guest Receipt options
    Best Answer

    EMPLOYEE
    Posted May 21, 2015 07:31 PM

    Tested this and it works.

     

    >> First be sure that your self-registration has both receipt actions set to auto_send_*

     

    mharing1.PNG

    mharing2.PNG

     

    >> Create a new field under Configuration > Pages > Field

     

    mharing3.PNG

    mharing4.PNG

     

    >> In your registration form, make sure phone number and email are added. Also add in the receipt_prefs, auto_send_sms and auto_send_smtp.

     

    mharing5.PNG

     

    >> Edit auto_send_sms in the form:

           - Make sure the intial value is 1

           - Click Show advanced properties

           - Add the following to the "Enable If:" field

    (Nwa_GetInputValue(receipt_prefs) == 0 || Nwa_GetInputValue(receipt_prefs) == 2)

          - Save

    mharing6.PNG

     

    >> Now edit auto_send_smtp

           - Make sure the intial value is 1

           - Click Show advanced properties

           - Add the following to the "Enable If:" field

    (Nwa_GetInputValue(receipt_prefs) == 1 || Nwa_GetInputValue(receipt_prefs) == 2)

          - Save

     

    mharing7.PNG

     

     

     



  • 5.  RE: ClearPass Guest Receipt options

    MVP
    Posted May 21, 2015 08:13 PM
    That is awesome, I will try next time im in clearpass and let you know. Thanks!

    ________________________________
    Michael Haring | Network Engineer
    (610) 246-6037 | Comm Solutions

    Sent from my iPhone


  • 6.  RE: ClearPass Guest Receipt options

    Posted Aug 31, 2015 04:34 PM

     Works great! Thanks!



  • 7.  RE: ClearPass Guest Receipt options

    Posted Oct 31, 2018 08:24 AM

    Similar thing.

     

    In our guest device registration form I've set up visitor_name to be a drop down list 

     

    dummy | ------- Select a WiFi Device -------
    Game Console - wifi xbox | Game Console - WiFi Xbox
    Game Console - wifi playstation | Game Console - WiFi Playstation
    Game Console - wifi nintendo | Game Console - WiFi Nintendo
    Amazon Echo - wifi | Amazon Echo - WiFi
    Amazon Fire TV - wifi | Amazon Fire TV - WiFi
    Google Home - wifi | Google Home - WiFi
    Roku Device - wifi | Roku Device - WiFi
    Sonos Device - wifi | Sonos Device - WiFi
    dummy2 | ------- Select a Wired Device -------
    Game Console - wired xbox | Game Console - Wired Xbox
    Game Console - wired playstation | Game Console - Wired Playstation
    Game Console - wired nintendo | Game Console - Wired Nintendo
    Roku Device - wired | Roku Device - Wired
    Smart TV - wired | Smart TV - Wired

     

    Now for some of those I want to make visible the airgroup_enable checkbox so thought I could use

     

    (Nwa_GetInputValue(visitor_name) == "Sonos Device - wifi")

    in the Advanced secton of airgroup_enable

    but if I select the Sonos Device - wifi option the checkbox doesn't appear

    ... or is there something different I have to use for string chekling in smarty?

     

    Rgds

    Alex



  • 8.  RE: ClearPass Guest Receipt options

    EMPLOYEE
    Posted Oct 31, 2018 08:28 AM
    Visitor name is supposed to be a unique device nickname. You should be using Roles for the device type and it's recommended to just enabled AirGroup for all headless devices.


  • 9.  RE: ClearPass Guest Receipt options

    Posted Oct 31, 2018 08:42 AM

    We're using the same page to register a whole batch of devices some of which aren't airgroup aware and are on our wired network. I can certainly change what I apply the dropdown list to thats not a problem

     

    However the question about checking for string contents still applies. The plan is to

    1). Just allow mac address registration of non airgroup devices ( now)

    2). Then allow registration of personal airgroup devices ( can;t share it with other users)

    3). Eventually/ possibly grant users abiltiy to share devices with other users.

    Thought I could use my dropdowj list to decide which devices have airgroups enabled 

    So how to I check for the seletion of one of a given set of dropdown values ?

     

     



  • 10.  RE: ClearPass Guest Receipt options

    Posted Nov 02, 2018 10:01 AM

    o.k. found a solution. Spent a while trying to do string matches / compares and failed so changed things a bit

     

    1). for visitor_name  set up the following options

    0 | -----Select a WiFi Device -----
    1 | Game Console - WiFi Xbox
    2 | Game Console - WiFi Playstation
    3 | Game Console - WiFi Nintendo
    4 | Roku - WiFi Device
    20 | Airgroup - Amazon Echo
    21 | Airgroup - Amazon Fire Device
    22 | Airgroup - Google Chromecast Device
    23 | Airgroup - Google Home
    24 | Airgroup - Sonos Device
    99 | -----Select a Wired Device -----
    100 | Game Console - Wired Xbox
    101 | Game Console - Wired Playstation
    102 | Game Console - Wired Nintendo
    103 | Smart TV - Wired

     

    Then in airgroup_enable

    Set the enabled and visible fields to have 

    (visitor_name.value >=  20) && (visitor_name.value <= 24)

    Basically all the ones in the dropdown list with Airgroup in the list item.

     

    Then in airgroup_shared 

     

    (typeof(airgroup_enable) == "undefined" || Nwa_GetInputValue(airgroup_enable) == 1) && ((visitor_name.value >=  20) && (visitor_name.value <= 24))

     

    and finally in airgroup_shared_user

     

    ((typeof(airgroup_enable) == "undefined" || Nwa_GetInputValue(airgroup_enable) == 1) && (typeof(airgroup_shared) == "undefined" || Nwa_GetInputValue(airgroup_shared) == 1)) && ((visitor_name.value >=  20) && (visitor_name.value <= 24))

     

    And it all works! you can select an item on the list and then have conditional airgroup settings visible depending on the visitor_name selected.

     

    As we've got the previous version live can't really move this over to using Roles to select something this year, but as people have to register devices every year we can sneak in the change next September

     

    That gets people past the registration page. ClearPass Policy Manager then generates roles based upon dhcp fingerprint associated with these devices.

    Rgds

    Alex

     



  • 11.  RE: ClearPass Guest Receipt options

    Posted Feb 01, 2019 06:03 AM

    Sigh! changed this to use airgroup_device_type ... and I don't get any drop down lists appearing ... now running 6.7.9. Anyone doing this sort of thing in 6.7.8 upwards ?