Security

Reply
MVP
Posts: 3,009
Registered: ‎10-25-2011

Failed to construct filter

When im doing the seft registration sometimes i get the captive portal again and i have to register twice.   After the second time it works...

When i get the captive portal again i get this error on the access tracker

 

 

error.PNG

 

 

Here is the config of the service

authenti source.PNG

auth source.PNG

 

role.PNG

 

enforment.PNG

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: Failed to construct filter

You need to add the guest user db as authentication /authorization source
And add the endpoint db as additional authorization source

Get Outlook for iOS
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP
Posts: 3,009
Registered: ‎10-25-2011

Re: Failed to construct filter

the guest user database ? do you mean the guest user repository???

 

If that is why do i need to add it as authetnication method? im just using it as authorization and its already added

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Guru Elite
Posts: 8,637
Registered: ‎09-08-2010

Re: Failed to construct filter

You should have two services: a MAC Authentication service and a Generic
RADIUS Enforcement service. The latter is used with the web login.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
MVP
Posts: 3,009
Registered: ‎10-25-2011

Re: Failed to construct filter

I do have 2 services but just posted the config of the service which is using.  Do you eant me to post the policies of the other service?

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
MVP
Posts: 3,009
Registered: ‎10-25-2011

Re: Failed to construct filter

[ Edited ]

also this happens like randomly...

Most of time it work as expected, you can register and get access.

 

What i notice that it always happens with iphones and ipad when the register for the first time.

 If i try with the same ipad and i delete the entry from the endpoint repository and i also remove the user account table and also removed from the controller client list,  ii dont have any issue... i just need to register once...

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
MVP
Posts: 3,009
Registered: ‎10-25-2011

Re: Failed to construct filter

Any ideas why this could be happneing????

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: Failed to construct filter

Change the Authentication Methods from Mac Auth to All Mac

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Search Airheads
Showing results for 
Search instead for 
Did you mean: