Security

last person joined: 9 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Single click clearpass

This thread has been viewed 38 times

  • 1.  Single click clearpass

    Posted Jan 15, 2014 09:47 AM

    Hi, 

     

    I am troubleshooting a single click through guest access in clearpasss. It should be very simple but I keep getting invaild credentials returned. 

     

    I came across this article in another post but I don't have aruba partner creds. Does anyone have a copy of this?

     

    https://afp.arubanetworks.com/afp/index.php/Terms_and_Conditions_on_ClearPass#Terms_Only_Web_Logins

     

    (we have a Dell braned aruba deployment :( )

     

    Let me know if you have any questions. 

     

    Thanks, 



  • 2.  RE: Single click clearpass

    EMPLOYEE
    Posted Jan 15, 2014 01:34 PM

    Try this.  It will use the default terms and conditions.

     

    Terms Only Web Logins

     

    To enable a login page solely containing terms and conditions, create a new web login with the folowing:

    • Authentication: Anonymous – Do not require a username or password
    • Auto-Generate: Checked
    • Anonymous User: Choose a unique username of your choice. It will not be visible outside the account list.
    • Pre-Auth Check: Local — match a local account


  • 3.  RE: Single click clearpass

    Posted Jan 16, 2014 09:07 AM

    Hi, 

     

    I have all of those settings. The only thing different is I just used the auto generated username instead of choosing one.  Ill try that and see if it works.

     

    Can anyone send me the text of the article in the original post?

     

    Thanks, 



  • 4.  RE: Single click clearpass

    EMPLOYEE
    Posted Jan 17, 2014 07:51 AM

    I'm trying this now but the login button does not appear, even though I have 'require terms' checked.

     

     



  • 5.  RE: Single click clearpass

    Posted Jan 17, 2014 10:43 AM

    Hi 

     

    I had that issue when I had the "_" and "_mac" as the user names. Wich makes sense.

     

    Ill post my current config and screen shot of error in a few min. 

     

    Thanks, 



  • 6.  RE: Single click clearpass

    Posted Jan 17, 2014 02:51 PM

    See attached:

     



  • 7.  RE: Single click clearpass

    EMPLOYEE
    Posted Jan 17, 2014 03:18 PM

    I did a very quick test and I got the page fine, but when I clicked on login, it redirected me to 'securelogin.arubanetworks.com' as expected, but then it threw up the portal from the IAPs.

     

    I assume that when you click login it sends a radius-accept back to the controller/IAP?

     

    It was only a quick test, so I'll have to have another look sometime.



  • 8.  RE: Single click clearpass

    Posted Jan 24, 2014 03:17 AM
    What Clearpass version is this? The documentation you refer to is for 3.9.x (Amigopod), and doesnt have any more info than what is already posted above I'm afraid. If 3.9.x then try to create the weblogin page from scratch with autogenerated checked.

    If 6.x you also need to create the services that accepts first the local and then the radius authentication.


  • 9.  RE: Single click clearpass

    Posted Jan 24, 2014 08:58 AM

    Hi,

     

    Sorry, yes this is for clearpass guest 3.9 (formerly amigopod).

     

    I will delete the page and try again!

     

    Thanks,



  • 10.  RE: Single click clearpass

    Posted Jan 27, 2014 05:34 PM
    Op, did you solve the issue?


  • 11.  RE: Single click clearpass

    Posted Jan 28, 2014 09:56 AM

    Hi, 

     

    I just remade a page and it still does not work correctly. 

     

    However, I do have some updates to apply for the system and after a separate issue, I think we are going to switch to the current CPPM 6.3 very soon.

     

    Thanks,