Security

Reply
Regular Contributor I
Posts: 195
Registered: ‎02-10-2014

Clearpass Guest Active Session Timeout

We are using Clearpass 6.4.0

 

We are seeing high session count from our Guest users. Every time a new users joins the network it creates a new session that doesn't seem to ever time out.

 

 

We have a captive portal setup that only requires an acceptance of our AUP to proceed. We use a local user (GuestAuth) to authenticate to Guest. 

 

The problem we see is each user that connects, creates a new session. The number of sessions just continues to grow. 

 

 

How can we expire sessions that are >24Hours?

MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: Clearpass Guest Active Session Timeout

Do you have Interim Accouting enabled ?

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Regular Contributor I
Posts: 195
Registered: ‎02-10-2014

Re: Clearpass Guest Active Session Timeout

[ Edited ]

I can't remember off the top of my head where interim accounting is located in the profile. Could you direct me please? I'd like to verify before I give an answer.

 

 

EDIT:

 

I found it. Configuration > Wireless > AP Configuration >  Wireless LAN > Virtual AP > {VAP Profile} > AAA

 

 

 

And yes. Interim accounting is enabled. 

 

 

 

Should I have User Idle timeout enabled and a time specified? Would that make a difference?

MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: Clearpass Guest Active Session Timeout

[ Edited ]

2014-12-17 12_22_01-ClearPass Policy Manager - Aruba Networks.png

 

2014-12-17 12_20_33-Authentication Profiles.png

 

 

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Regular Contributor I
Posts: 195
Registered: ‎02-10-2014

Re: Clearpass Guest Active Session Timeout

Yes it is enabled on the Controller and on CPPM. 

 

 

MVP
Posts: 4,307
Registered: ‎07-20-2011

Re: Clearpass Guest Active Session Timeout

[ Edited ]

You add this into your policy

 

2014-12-17 13_14_22-ClearPass Policy Manager - Aruba Networks.png

 

 

2014-12-17 13_14_22-ClearPass Policy Manager - Aruba Networks.png

 

 

 

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Search Airheads
Showing results for 
Search instead for 
Did you mean: