11-05-2015 11:49 AM
- MAC Authentication
- Guest Captive Portal
Snr Tech Marketing Engineer - ClearPass
-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
11-18-2015 11:27 AM
Can someone confirm that a command is missing on the "Guest Access with MAC Caching" part in the "Configure WLAN ESS" commands. On my tests in the customer site we could not get an IP address until we added the command "mac-authentication guest-vlan 50". Without this command, after the ClearPass sends the reject for the MAC auth, the user does not get an IP address.
I am not familiar with HP UWW but it's not clear to me that the proposed configuration on this document allows the user to connect to VLAN 50 in case of mac auth failure (before the user authenticates to the guest portal).
11-23-2015 10:41 AM
Adding to my last comment above, we could take out "mac-authentication guest-vlan 50" command by configuring ClearPass to allow any MAC to authenticate. What is correct approach of this Tech Note? In both cases ("mac-authentication guest-vlan 50" or ClearPass allowing any MAC) the Tech Note needs corrections.