Security

Reply
MVP
Posts: 1,110
Registered: ‎10-11-2011

Identify Authenticator in RADIUS request

For troubleshooting purposes, I'd like the name of the device (authenticator) that's sending the RADIUS request to be populated in the RADIUS Request details.  This will make it faster to identify the device, rather than having to translate the NAS IP to a name.  I'm able to use a name in the NAS ID field on mobility switches, but I can't on WLAN controllers since all of the local controllers would use the same NAS ID specified under the RADIUS Server(s).  I don't see the ability to specificy a unique NAS ID on each controller, like you can a NAS IP.  Is there anyway to specify the NAS ID per controller?

 

As an alternative, in CPPM I can create a new device attribute called "name" and populate it, which would show up in the Computed Attributes of RADIUS requests.  This would solve my problem, but would be great if I could just set up a unique identifer on each controller.

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Guru Elite
Posts: 7,821
Registered: ‎09-08-2010

Re: Identify Authenticator in RADIUS request

Are you not seeing it as a computed "Location" attribute?

Thanks,
Tim

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
MVP
Posts: 1,110
Registered: ‎10-11-2011

Re: Identify Authenticator in RADIUS request

We have a location attribute configured per device which shows up.   Our location = each campus.

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Aruba
Posts: 1,635
Registered: ‎04-13-2009

Re: Identify Authenticator in RADIUS request

Do you need it as part of the RADIUS request, or is visibility in Access Tracker acceptable?   6.5 now includes the name of the NAD and Vendor type on the summary page of Access Tracker:

 

cppm-65-accesstracker.png

------------------------------------------------
Systems Engineer, Northeast USA
ACCX | ACDX | ACMX

MVP
Posts: 1,110
Registered: ‎10-11-2011

Re: Identify Authenticator in RADIUS request

Would be great to see the name of the device on the summary page.  Is the hostname of that device in your example called "Aruba"?

=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
MVP
Posts: 4,004
Registered: ‎07-20-2011

Re: Identify Authenticator in RADIUS request

Stealing clembo post :

It does show whatever the description you type when adding the network device

2015-04-29 11_48_09-ClearPass Cluster - Chrome Remote Desktop.png

 

2015-04-29 11_49_54-ClearPass Cluster - Chrome Remote Desktop.png

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP
Posts: 1,110
Registered: ‎10-11-2011

Re: Identify Authenticator in RADIUS request

Okay cool. Guess that's one more reason to upgrade. Thanks all.
=======================================
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
Aruba
Posts: 1,635
Registered: ‎04-13-2009

Re: Identify Authenticator in RADIUS request


thecompnerd wrote:

Would be great to see the name of the device on the summary page.  Is the hostname of that device in your example called "Aruba"?


My Network Device is named 7010 and the Vendor is Aruba; so it shows as 7010 / Aruba.

 

 

------------------------------------------------
Systems Engineer, Northeast USA
ACCX | ACDX | ACMX

Search Airheads
Showing results for 
Search instead for 
Did you mean: