Security

last person joined: 21 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass guest renewal for less time than original registration

This thread has been viewed 0 times
  • 1.  ClearPass guest renewal for less time than original registration

    Posted May 25, 2016 10:52 AM

    I have two different guest self registration pages.  One allows the user a 12 hour session and the other one allows the user a 1 week session.  The 12 hour session is working correctly, the issue I have is when the 1 week user expires, and they try to extend/re-register it only extends the user 12 hours.  Below is the expire after field on the form for the 1 week user.

     

    expire_after.PNG

     

    Any suggestions on this matter will be appreciated, as i have looked everywhere and cannot find the problem with this.



  • 2.  RE: ClearPass guest renewal for less time than original registration

    Posted May 25, 2016 01:44 PM

    Are you using the same expire_after field for both pages ?

    Can you share the post auth enforcement that you are using for 1 week?



  • 3.  RE: ClearPass guest renewal for less time than original registration

    Posted May 25, 2016 05:01 PM

    I am pretty sure, that im using this one below.  How can you check to be sure?

     

    enforcement_profile.PNG



  • 4.  RE: ClearPass guest renewal for less time than original registration
    Best Answer

    Posted May 25, 2016 05:42 PM
    If you are using mac caching you need to apply two different post auth mac caching profiles :
    - One for one week
    - One for 12 hours
    You can apply this based on the guest page name (Source) = /guest/<guest page name>.php
    - You can use GuestUser > Source > guest page name (one week) >>>> Post Auth for One Week
    - You can use GuestUser > Source > guest page name (12 hours) >>>> Post Auth for 12 Hours


  • 5.  RE: ClearPass guest renewal for less time than original registration
    Best Answer

    Posted May 25, 2016 06:00 PM

    so how would i go about doing that?  



  • 6.  RE: ClearPass guest renewal for less time than original registration

    Posted May 25, 2016 01:53 PM
    Are you using the same expire_after field for each page ?


  • 7.  RE: ClearPass guest renewal for less time than original registration

    Posted May 25, 2016 04:55 PM

    Yes, I am using the same field, but each page has a diffent value.  expire_after_12.PNG