Security

Reply
Contributor II

Mac Cache

I’ve got a guest SSID setup on a controller redirecting to a webpage on Clearpass. I have Mac Caching enabled, well at least I thought I did. The Mac are not registering/populating the database so something must be a miss. Any advice on where to look or clear cut instructions for setting that up?

 

Thxs

Re: Mac Cache

What I suggest you do is create your Mac Caching services using the ClearPass templates "Guest Mac Authentication"

 

In the controller make sure you have the following :

- Cleapass as you mac authentication server source

- Add a Mac Auth L2 profile

- Enable Accounting in the aaa profile

- And ClearPass as your RFC 3576

 

Thank you

Victor Fabian
Lead Mobility Engineer @ Integration Partners
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP

Re: Mac Cache

 

Try a few things

Verify that MAC-Auth is triggered in the Access Tracker. Follow Victors instructions if they don't show there.

 

Enable Insight under Server Configuration

On you login-page select "Update Endpoint"

 

Verify again through access-tracker that mac-auth is triggered.

 


Regards
John Solberg

-ACMX #316 :: ACCP-
Intelecom - Norway
----------------------------
Remember to Kudo if a post helped you! || Problem Solved? Click "Accept as Solution" in a post!
Contributor II

Re: Mac Cache

victor, how do I do this with Instant APs? 

Guru Elite

Re: Mac Cache

From the ClearPass side, there is no difference.

 

To configure MAC-authentication on Instant: 

http://www.arubanetworks.com/techdocs/Instant_41_Mobile/Advanced/Content/UG_files/Authentication/MAC_Authentication.htm?SearchType=Stem


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II

Re: Mac Cache

I would assume the MAC Cache service needs to be before the auth service or does it matter?

Guru Elite

Re: Mac Cache

It just logically makes sense to have it before your web auth service since that's the order it's processed. 


Thanks, 
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: