Security

Reply
Contributor I
Posts: 47
Registered: ‎07-18-2014

Filter the Framed IP Address

Hi,

 

 Is there a way to filter the "Framed IP Address"?? I need to give access to a user IP or IP range but don't get into the attribute to use the client IP.

Guru Elite
Posts: 7,851
Registered: ‎09-08-2010

Re: Filter the Framed IP Address

What authentication method is in use?

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Contributor I
Posts: 47
Registered: ‎07-18-2014

Re: Filter the Framed IP Address

802.1X

Guru Elite
Posts: 7,851
Registered: ‎09-08-2010

Re: Filter the Framed IP Address

You won't be able to use the client's IP in an 802.1X policy decision as 802.1X occurs at L2 before an IP address is issued to the client.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Contributor I
Posts: 47
Registered: ‎07-18-2014

Re: Filter the Framed IP Address

So, in wich scenario can I use the IP address?

 

Can I create a new attribute and use this IP to update it?

Guru Elite
Posts: 7,851
Registered: ‎09-08-2010

Re: Filter the Framed IP Address

You can only leverage the client's IP during a web auth or VPN authentication.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Contributor I
Posts: 47
Registered: ‎07-18-2014

Re: Filter the Framed IP Address

How can I set the service to filter the IP address on a web auth?

Guru Elite
Posts: 7,851
Registered: ‎09-08-2010

Re: Filter the Framed IP Address

Can you please explain your authentication sequence, workflow and expected outcomes?

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Contributor I
Posts: 47
Registered: ‎07-18-2014

Re: Filter the Framed IP Address

I need to use 802.1X or CaptivePortal auth, due to the users use a static IP address, the idea is to give access just to a range of IP addresses.

Search Airheads
Showing results for 
Search instead for 
Did you mean: