Security

Reply
Contributor II
Posts: 51
Registered: ‎04-13-2009

Need assistance with adding MAC caching and authentication for guests

I have integrated my guest SSID on my controller with ClearPass Guest authentication and that appears to be working.  I want to add mac caching and mac authentication for guest users, so that they don't have to reauthenticate every time their device wakes up, or they reconnect to the guest WLAN.  I'd like to give them an 8 hour window where they can reauthenticate using their cahed mac address, rather than using a username and password.  I wasn't quite sure how to accomplish what I want to do, so I disabled my working guest access service and used the service template, Guest MAC Authentication, to create a new service.  This appears to create two new services:Guest MAC Authentication, and Guest Access with MAC Caching.  I am not certain what each of these new services does, or how to modify them to accomplish my task.

 

Any assistance, or configuration documentation would be greatly appreciated.

Regards,
DAK
Contributor I
Posts: 26
Registered: ‎04-13-2009

Re: Need assistance with adding MAC caching and authentication for guests

MVP
Posts: 505
Registered: ‎05-11-2011

Re: Need assistance with adding MAC caching and authentication for guests

Aruba controller? First you add mac auth profile (dash separator is fine) and mac auth server (clearpass) in your guest- AAA profile.
Second adjust the ssid name in the two new services the wizard created.
-》Done! There is some more tweaking you can do, but at this stage it will work.

Regards
John Solberg

-ACMX #316 :: ACCP-
Intelecom - Norway
----------------------------
Remember to Kudo if a post helped you! || Problem Solved? Click "Accept as Solution" in a post!
Contributor II
Posts: 51
Registered: ‎04-13-2009

Re: Need assistance with adding MAC caching and authentication for guests

Thank you, John.  It took some fiddling, but I was able to get this working.  I will have to tinker a bit more when I have some time, but for now MAC Auth appears to be functioning.

Regards,
DAK
Search Airheads
Showing results for 
Search instead for 
Did you mean: