Security

Reply
Occasional Contributor II
Posts: 18
Registered: ‎04-19-2015

Clearpass Guest MAC-Auth Expiry attribute not updating

Hi All,

 

Im having trouble getting some aspects of MAC caching to work correctly with clearpass 6.5.5. Initial login on and mac caching works as expected, however when I try to update the Account Expiration Time though Clearpass Guest Account Manager any change does not update in the endpoint database specifically the "MAC-Auth Expiry" attribute.

 

Can some one please explain what this the "Account Expiration Time" setting in Clearpass Guest Account Manager changes, and how i can get it to also change the "MAC-Auth Expiry" in the endpoint database so my Guest MAC Cache Service will correctly authenticate users.

Guru Elite
Posts: 8,759
Registered: ‎09-08-2010

Re: Clearpass Guest MAC-Auth Expiry attribute not updating

The change would be reflected the next time the user web authenticated. 

Sent from Nine

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II
Posts: 18
Registered: ‎04-19-2015

Re: Clearpass Guest MAC-Auth Expiry attribute not updating

My Setup is as follows:

 

User Connects to SSID > Redirect to Captive Portal > Self Registration > Clicks Login > Endpoint DB updated with 12 hour MAC Authentication > Internet

User Connects secont time within 12 hours > MAC Authentication > internet

 

User Connects after 12 hours > Redirect to Captive Portal .... etc

 

So with this configration is that drop down box in Guest Manager useless? is there any way i can change what it updates?

 

 

Guru Elite
Posts: 8,759
Registered: ‎09-08-2010

Re: Clearpass Guest MAC-Auth Expiry attribute not updating

There is no way to update the MAC-Auth Expiry value from the guest user properties. 

Sent from Nine

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor II
Posts: 18
Registered: ‎04-19-2015

Re: Clearpass Guest MAC-Auth Expiry attribute not updating

Thanks for your help. ....feature request!

Search Airheads
Showing results for 
Search instead for 
Did you mean: