Security

Reply
Contributor II
Posts: 52
Registered: ‎05-08-2014

Guest Authentication Failed (Clearpass)

Hi All,

I am working on Clearpass guest, i implemented all the scenario but the issue is when i am trying to login by username and password i received an error "Authentication Failed". I tried to create a new account from the same login page and the account was created successfuly as i confirmed from the CPPM. 

abc.JPG

But when i tried to login with the same username and password again i received the same error. Below are the sanpshots from the configuration i did.

1. Group = Universities

1.JPG

2. VAP = guest_uni_vap_pro

2.JPG

3. AAA Profile = guest_uni_aaa_pro,

SSID Profile = guest_uni_ssid_pro

 

3.JPG

4. AAA initial Role = guest_uni_aaa_init_role

 

4.JPG

5.  user role guest_uni_aaa_init_role 

 

access-list List
----------------
Position Name Type Location
-------- ---- ---- --------
1 global-sacl session
2 apprf-guest_uni_aaa_init_role-sacl session
3 logon-control session
4 cppm_red_acl session
5 captiveportal session

---------------------------------------------------------------------------------

 

6. Default Role (L3 Authentication)

 

access-list List
----------------
Position Name Type Location
-------- ---- ---- --------
1 global-sacl session
2 apprf-guest_uni_aaa_init_role-sacl session
3 logon-control session
4 cppm_red_acl session
5 captiveportal session

--------------------------------------------------------------------------------

 

Please support me.

 

Guru Elite
Posts: 8,759
Registered: ‎09-08-2010

Re: Guest Authentication Failed (Clearpass)

For guest, you should not have an 802.1X server group defined.

The ClearPass server-group should be defined in your captive portal profile.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 52
Registered: ‎05-08-2014

Re: Guest Authentication Failed (Clearpass)

Thanks Cappalli,

 

I checked my configuration and i found that i didn't add Captive Portal Profile in L3 Authentication Default Role. I added but the repsonse is same authentication failed. Below are the snapshots for your review.

 

6.JPG

 

7.JPG

 

Aruba
Posts: 1,548
Registered: ‎06-12-2012

Re: Guest Authentication Failed (Clearpass)

Your Mac auth server group shows default. Should be your cppm server
Thank You,
Troy

--Give Kudos: found something helpful, important, or cool? Click Kudos Star in a post.

--Problem Solved? Click "Accepted Solution" in a post.
Contributor II
Posts: 52
Registered: ‎05-08-2014

Re: Guest Authentication Failed (Clearpass)

I added the MAC Authentication Server Group but the facing same issue. 8.JPG

Aruba Employee
Posts: 508
Registered: ‎02-19-2015

Re: Guest Authentication Failed (Clearpass)

Waseem,

 

Could you share authentication failed access tracker log, if it is not possbile , please open TAC ticket.

 

Regards,

Pavan

Contributor II
Posts: 52
Registered: ‎05-08-2014

Re: Guest Authentication Failed (Clearpass)

Hi Pavan,

 

Thanks for reply. Actually i didn't see any thing in the Access Tracker. I didn't see any authentication request hits the clearpass. If you check my first post there i mentioned that the user is created successfuly but the problem is authentication failed but here the strange thing is i didn't not see any thing in the access tracker and no authentication hits the clearpass.

Aruba Employee
Posts: 508
Registered: ‎02-19-2015

Re: Guest Authentication Failed (Clearpass)

I have attached clearpass and aruba wireless integration guide which provide steps for .1x and Guest authentication.

 

I understand that authentication request itself not coming on to CPPM, have you added controller IP to clearpass?

 

If you have added controller ip in cppm then something configuraiton mismatch on controller, check the Tech document.

 

Regards,

Pavan

 

If my post addresses, your query give kudos:)

Contributor II
Posts: 52
Registered: ‎05-08-2014

Re: Guest Authentication Failed (Clearpass)

Thanks for the Guide. I follow the same guide during configuration. Now i don't have access to controller and clearpass, today i will cross check and update you.

Occasional Contributor II
Posts: 18
Registered: ‎04-30-2017

Re: Guest Authentication Failed (Clearpass)

[ Edited ]
Hi,
If you are not getting any hit in access tracker then please check event viewer in Clearpass.
Search Airheads
Showing results for 
Search instead for 
Did you mean: