Security

last person joined: 2 days ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

User limit with cppm

This thread has been viewed 3 times
  • 1.  User limit with cppm

    Posted Feb 21, 2015 02:46 PM

    Hi all,

    I have created 1 SSID and now I want to limit the user in that SSID from CPPM [for testing] . Is there any option to do this ?

    please help.



  • 2.  RE: User limit with cppm

    EMPLOYEE
    Posted Feb 21, 2015 02:48 PM
    Can explain a bit more? Not sure what you're asking. 


    Thanks, 
    Tim


  • 3.  RE: User limit with cppm

    Posted Feb 21, 2015 02:51 PM

    Sorry for my laziness,

    I want to limit the user No on that SSID.

    Means SSID1 - no of user 10. So after 10 user CPPM should return a auth reject message to #11 user.



  • 4.  RE: User limit with cppm

    EMPLOYEE
    Posted Feb 21, 2015 02:53 PM
    You would do that at the controller level under the SSID profile.


  • 5.  RE: User limit with cppm

    Posted Feb 21, 2015 03:00 PM

    Thanks Tim,

    I know that and already did, but for the shake of knowledge I want to know the CPPM path.



  • 6.  RE: User limit with cppm

    EMPLOYEE
    Posted Feb 21, 2015 03:12 PM
    Trying to do this in ClearPass would require custom sql queries against the Insight database. This is really a controller-level function and would put unnecessary load on your RADIUS server. 


    Thanks, 
    Tim


  • 7.  RE: User limit with cppm
    Best Answer

    EMPLOYEE
    Posted Feb 21, 2015 02:49 PM


  • 8.  RE: User limit with cppm

    Posted Feb 21, 2015 03:27 PM

    Thanks Colin and Tim,

     

    cjoseph wrote:

    I found this link here:  http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-limit-simultaneous-active-sessions-from-a-given-user/ta-p/186556 by doing a search in the knowledgebase.


    Yeah this link helped, now its working. So I got another option to limit the user per SSID.