Security

Is there a way to use a coa based web portal on clearpass guest using aruba controller?

I'm trying to set-up on-guard with anonymous login. (I.e how it was in 6.2).

You can do it with creating a Web Login that has anonymous login/OnGuard. See screen shots

 

 

Exactly how I have it. But it appears that the php code looses the username and password after the scan is complete. So it never actually submits.

Are you seeing any errors in access tracker?

No I am not. On the client it says. "* Username: Required field unavailable"

You need to hit the page with a redirect. If you are trying it from just hitting the test button it will not work. CPPM will get the mac address and tie it to the anonymous account. You need to make sure you have to check mark to auto generate the account..

 

The error you are getting is on the guest side from an account not being created when you hit the logon button.

 

Hi tarnold,

 

I tried to follow your way what you post.

But I never made it successful.

 

Any idea?

 

Thanks.

There are alot of pieces of this,

 

 

1. so what errors are you seeing,

2. are you seeing auth requests hitting the CPPM side,

3. any errors in the event viewer in guest. 

4. Can you do a regular 802.1x or MAC auth to CPPM from your controller?

Hi tarnold,

 

Thanks your reply.

 

1. Web login with anonymous failed message is invalid username or password.

2. No any message in Access Tracker

3. No any message in event viewer

4. Yes, if using regular web login in Onboard process, It work fine!

 

any idea?

Hi sdr53,

 

I had the same issue with you. I never made it successful before.

Did you sovle this issue?

Could you share it to us?

I did it poor mans way and just redirected to google after 10seconds using php redirect. So the user reads the error and then all the sudden they are at google and carry on with their day. Our policy lets them to the internet even if they fail the onguard solution. But I need to change it to use a CPPM webauth solution. That might be your best route.

Hi sdr53,

 

Thanks your reply.

I just want to Web login with anonymous. but always login failed with anonymous.

It returned message is invalid username or password.

 

any idea?