Security

Reply
Occasional Contributor II

Number of devices a guest user has registered

Where do i find the devices a user has register. We limit our guets user to 3 devices, which i can see, but a user is having problems accessing the network and i want to see how many devices that user has registered and what they are.


Where would i find that in Clearpass?

Re: Number of devices a guest user has registered

If you been adding the Guest email / user to the endpoint db

You can do a search under Configuration >Identity > Endpoints DB

Select Attribute from the filter drop down and then pick username , this will allow you to search for all the mac addresses tied to a particular username/email
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II

Re: Number of devices a guest user has registered

While i have a big list of MAC address, I dont have usernames nor a dropdown for it.

 

When i check the Guest policy, the it uses the Endpoints Repository

Re: Number of devices a guest user has registered

Are you doing mac caching ?
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II

Re: Number of devices a guest user has registered

Yes, Sorry. 

 

MAC Caching,

Re: Number of devices a guest user has registered

You can add the following to the mac caching post_auth enforcement profile when the user performs the web authentication 

Screen Shot 2018-01-19 at 10.06.25 AM.png

This way you will be able to see the device mac associated with guest username/email in the endpoint db 

 

Note: The only Attribute you need to add is the Endpoint : Username : % {Authentication:Full-Username}

Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
MVP

Re: Number of devices a guest user has registered

For ease of troubleshooting I put that unique-device-count in a seperate condition and attach a role (Device Count Exceeded) to it.

 

This way in Access Tracker I can see right away if this is a cause for connectivity issues. Much easier than having to search the endpoint repository every time.

 

 

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: