Security

Reply
Frequent Contributor II
Posts: 479
Registered: ‎03-15-2014

Clearpass Guest inquiry..regarding Sessions limitations and control?

I'm in a situation where I need to make the Default Guest session to be one and also modify it to be many session if needed so I configured as belwo:

 

on Controller L3 profileI allowed only one active session and now on clearpass guest when I choose for specific guest to have 3 sessions as needed only 1 session is allowed.

 

how to solve this?

Guru Elite
Posts: 21,290
Registered: ‎03-29-2007

Re: Clearpass Guest inquiry..regarding Sessions limitations and control?

[ Edited ]

You should only enforce sessions on the controller OR clearpass, NOT both.

 

On the controller, you can only enforce a single session when doing web authentication.  Clearpass is more flexibile and should be used if you need multiple sessions enforced.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor II
Posts: 479
Registered: ‎03-15-2014

Re: Clearpass Guest inquiry..regarding Sessions limitations and control?

Thats what I tried I didn't check one session box in controller and on clearpass I choosed 1 session on specific guest but I was able to log with 2 sessions

Guru Elite
Posts: 21,290
Registered: ‎03-29-2007

Re: Clearpass Guest inquiry..regarding Sessions limitations and control?

You need Radius Account Enabled on your Aruba Controller that points to your Clearpass appliance.  You also need to enable interim radius accounting.

 

On the ClearPass side, you should look at the article here:  http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-limit-simultaneous-active-sessions-from-a-given-user/ta-p/186556



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite
Posts: 21,290
Registered: ‎03-29-2007

Re: Clearpass Guest inquiry..regarding Sessions limitations and control?

You need Radius Account Enabled on your Aruba Controller that points to your Clearpass appliance.  You also need to enable interim radius accounting.

 

On the ClearPass side, you should look at the article here:  http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-limit-simultaneous-active-sessions-from-a-given-user/ta-p/186556



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor II
Posts: 479
Registered: ‎03-15-2014

Re: Clearpass Guest inquiry..regarding Sessions limitations and control?

Thanks Man really add value to me :)

Frequent Contributor II
Posts: 479
Registered: ‎03-15-2014

Re: Clearpass Guest inquiry..regarding Sessions limitations and control?

Now I read the articel so I should add this to authentication source with Guest repository ?

 

also,If I need to change for specific account or have 2 sessions and the default ro be one session how to achive this?

Search Airheads
Showing results for 
Search instead for 
Did you mean: