Security

Reply
New Contributor

How can I find the mappng rule used to assign a role?

Is there a simple way to verify what mapping rule was used to assign a role?

 

We are in the process to modifying some rules but leaving the original rules while testing. We want to know for sure that the new rule was applied instead of the old/original one.

 

 

Guru Elite

Re: How can I find the mappng rule used to assign a role?

No, you’d need to evaluate the conditions for the request.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480

Re: How can I find the mappng rule used to assign a role?

The command #show user mac XX might help with the User Role Derivation used.

 

(Aruba620) #show user mac xx:xx:xx:xx:xx:xx


Name: , IP: 10.10.10.3, MAC: xx:xx:xx:xx:xx:xx, Age: 00:01:13
Role: ssid-authenticated (how: ROLE_DERIVATION_INITIAL_ROLE), ACL: 67/0
Authentication: No, status: not started, method: , protocol: , server:
Role Derivation: ROLE_DERIVATION_INITIAL_ROLE
VLAN Derivation: Default VLAN

 


ACMP, ACSA, ACDX #985
If my post addresses your query, give kudos:)
Guru Elite

Re: How can I find the mappng rule used to assign a role?

Role derivation on the controller has nothing to do with ClearPass role mapping.

Tim Cappalli | Aruba Security
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480

Re: How can I find the mappng rule used to assign a role?

@


ACMP, ACSA, ACDX #985
If my post addresses your query, give kudos:)
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: