Security

Reply
Occasional Contributor I
Posts: 8
Registered: ‎07-16-2013

Tracking which AP a guest requests access from.

I work at a boarding school and we have AP's in all of our classrooms. We don't allow cell phones on campus for the boys. Recently we've run into a problem where they are continuously requesting guest access.

 

So my question to you guys, is it possible to track which AP unit gave out an IP address, or which AP a guest requested access at?

 

Thanks,

Joshua

Aruba
Posts: 233
Registered: ‎11-19-2009

Re: Tracking which AP a guest requests access from.

Yes. Below command would give you about to which AP the client is attached and got the guest access from.

 

show user | include <ip address of the client>

show ap assocication client-mac< mac address of the client>

 

Thank you.

MVP
Posts: 562
Registered: ‎11-28-2011

Re: Tracking which AP a guest requests access from.

I know this isn't the question you're asking, but...

 

How does knowing the origin AP where the request came from help you? What problem are you really trying to resolve? If the problem is stopping persistent requests, I'm not sure how knowing this information gets you where you need to be?

 

We need to know two things to give you a good suggestion.

 

1. What problem are you trying to fix?

2. What products are you using (we might then ask about config)? I.e. Instant APs, controllers? Do you have Clearpass?

 

Also note that (unless you've got a very specific setup), it's unlikely your APs are giving out IP addresses.

 

Thanks.

Kudos appreciated, but I'm not hunting! (ACMX 104)
Occasional Contributor I
Posts: 8
Registered: ‎07-16-2013

Re: Tracking which AP a guest requests access from.

It narrows down which classroom the kid is in, which allows us to shake down 19 students instead of 600 students. Being able to narrow it down really heps. (I figured out how to do it in the controller)

 

We just had our Aruba equipment installed last week, so we're stumbling through it. We have 105's for APs with 2 Domain Controllers. We do have clearpass as well.


We thought guest access was turned off on the AP's used by the cadets, but it doesn't seem to be.

MVP
Posts: 562
Registered: ‎11-28-2011

Re: Tracking which AP a guest requests access from.

Ahhh, I see.

 

So, until you get full control over your "business" process for service delivery (i.e. what you really want to do and where), would it help to turn off the guest service in some areas? Is that an option that would resolve the headache? That is achievable by way of help on here.

 

If not, you'd have to look at the Clearpass setup, so it was more restrictive on the registration process (which would stop the students attempting in the first place). That's a quite a big task, so probably not resolvable on here really (needs in-depth consultation). You'd need to ask your Aruba supplier for a view I would think.

 

Thanks.

 

 

Kudos appreciated, but I'm not hunting! (ACMX 104)
Aruba
Posts: 1,368
Registered: ‎12-12-2011

Re: Tracking which AP a guest requests access from.

You can probably create a report with ClearPass's Insight as well to show this for forensics.

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Search Airheads
Showing results for 
Search instead for 
Did you mean: