Security

Reply
Contributor II
Posts: 62
Registered: ‎07-01-2013

Per-user customization of maximum allowed Onboarded devices

Hello,

 

We are setting up Onboard for our users with a maximum number of allowed devices that a user can register. However, there are use cases in our company where some users who do testing with many different types of devices and may need to Onboard more than the normal maximum number of 2. How can we set it up so that some users or groups of users are allowed to Onboard more than 2?

 

 

Tim Haynie, ACMX #508, ACDX #384, ACCP, CWSP, CWAP, CWDP, CCNP R/S, CCNP Wireless, CCNA Security, CCDA
Guru Elite
Posts: 8,765
Registered: ‎09-08-2010

Re: Per-user customization of maximum allowed Onboarded devices

Create a new Application enforcement profile with the number of devices like below:

APP-ENF-ONBOARD-5.PNG

 

Then in your Onboard Authorization service, map the AD group to the new enforcement policy either directly or using TIPS role mapping.

 

onboard-app-5.PNG


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor II
Posts: 62
Registered: ‎07-01-2013

Re: Per-user customization of maximum allowed Onboarded devices

What about the "Maximum Devices" field found under the provisioning settings in the Onboard configuration? Should this still be set to 2, or does it need to be set to 0 (ininite) and make another enforcement profile in Policy Manager that sets all other users to 2?

Tim Haynie, ACMX #508, ACDX #384, ACCP, CWSP, CWAP, CWDP, CCNP R/S, CCNP Wireless, CCNA Security, CCDA
Guru Elite
Posts: 8,765
Registered: ‎09-08-2010

Re: Per-user customization of maximum allowed Onboarded devices

That value will apply for any authorization response that does not contain the Max Devices attribute.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: