ClearPass and HP UWW [dot1x / MAC Auth / Guest Captive Portal]

[dannyjump]

A new configuration guide covering Unified Wireless (HP's UWW) with ClearPass has been published. The guide covers three use cases:

• 802.1X
• MAC Authentication
• Guest Captive Portal

The guide is available on the support site.

https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=19502

[leomezza]

Hello guys,

Can someone confirm that a command is missing on the "Guest Access with MAC Caching" part in the "Configure WLAN ESS" commands. On my tests in the customer site we could not get an IP address until we added the command "mac-authentication guest-vlan 50". Without this command, after the ClearPass sends the reject for the MAC auth, the user does not get an IP address.

I am not familiar with HP UWW but it's not clear to me that the proposed configuration on this document allows the user to connect to VLAN 50 in case of mac auth failure (before the user authenticates to the guest portal).

Thank you,

Leonardo Mezzanotti

[leomezza]

Adding to my last comment above, we could take out "mac-authentication guest-vlan 50" command by configuring ClearPass to allow any MAC to authenticate. What is correct approach of this Tech Note? In both cases ("mac-authentication guest-vlan 50" or ClearPass allowing any MAC) the Tech Note needs corrections.

Thank you

[Edgar Mercado]

I cant download the document, when I press the link it takes me to the support page home.

[cappalli]

https://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=20023

[Edgar Mercado]

Thanx