12-17-2013 04:36 AM
We have Clearpass Guest 18.104.22.16866, part of ClearPass Policy Manager 22.214.171.124442 to allow our guest to have internet access. We use aruba 3600 controllers (with the 126.96.36.199 firmware i recently updated).
Clearpass Guest is configured with self registration and sms. Our guest suppose to regisger on a webpage, receive a sms and authenticate with username and password, where the username is their e-mail and the password is a password send by sms.
This seem to work fine.
The only thin is that employees are reporting that their guests already have access before receiving the sms and entering the information in the logon page.
What could be the issue? Could this be an issue between the initial profile and the real guest profile on the aruba controller? Or could this be something else?
I'm not sure where to start.
Thank you in advance.
Solved! Go to Solution.
12-17-2013 04:41 AM - edited 12-17-2013 04:44 AM
12-17-2013 07:00 AM
Yes, this was the problem.
On the receipt page the login button was displayed. I had an automaticly redirect configured to the login page from the receipt page with a 5 seconds delay, but the button was displayed during those 5 seconds.
So the beheviour was that someone who was quick enough to click the login button was given directly internet access from the receipt page, while someone who didn't click the button needed to wait for the sms.
I disabled the login button and now this is working as expected, they should not be able anymore to get direct access withouth the password send in the sms.
Thank you for the quick support.