Security

Reply
Occasional Contributor II
Posts: 21
Registered: ‎10-10-2014

Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

I need to configure guest mac authentication. For this  i have setup the guest mac authentication wizard , this wizard gives me two services

 

  1. Guest MAC-Auth Service Guest MAC Authentication
  2. Guest MAC-Auth Service Guest Access With MAC Caching

I am not triggring the guest mac-authentication service. howerver i have configured the controller/SSID during the clearpass guest mac authentication wizard.

 

 

MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

[ Edited ]
In the controller Config make sure you add ClearPass as your authentication server for Mac auth and you also need to add a Mac Auth profile

This is under your guest aaa profile
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II
Posts: 21
Registered: ‎10-10-2014

Re: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

[ Edited ]

Already added the clearpass in the server group and also for the authentication server group. Also added the mac-authentication profile in the aaa profile.

 

Still getting errror. guest person is not authenticated.

MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

Quick question , are you seeing this on the initial guest Mac Auth ?
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II
Posts: 21
Registered: ‎10-10-2014

Re: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

I want to configure guest mac authentication. When my guest get connected to the SSID it doesnt shows any output on the access tracker.

 

MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

Make sure sure that the key on both (controller/clearpass) matches

On your controller check what the ip source radius VLAN and nas-ip address used to send the request and make it matches what you configured on CPPM
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II
Posts: 21
Registered: ‎10-10-2014

Re: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

Please see the below snapshot

1.jpg

MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

Did you use the Guest Mac Auth template in CPPM to create both services ?
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II
Posts: 21
Registered: ‎10-10-2014

Re: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

[ Edited ]

Yes both services are showing.... 

 

Untitled22.jpg

MVP
Posts: 4,301
Registered: ‎07-20-2011

Re: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

Can you share your aaa profile on your controller ?

I think you are missing the Mac Auth profile define
Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Search Airheads
Showing results for 
Search instead for 
Did you mean: