Security

Reply
Occasional Contributor II
Posts: 44
Registered: ‎11-22-2013

clearpass Concurrent Session

Hi Sifus,

 

is there any way to show notification to the user when they already use more than 2 devices .

 

can we make it to show at the captive portal immediatley after the user try to login, the same concept as user log in using invalid password (the notification will appear in red text).

Guru Elite
Posts: 21,499
Registered: ‎03-29-2007

Re: clearpass Concurrent Session

What WLAN controller is being used?  The method used to notify the user will depend on the WLAN controller.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 44
Registered: ‎11-22-2013

Re: clearpass Concurrent Session

We are using 7220. Can we do simple error message like the invalid username password ?
Guru Elite
Posts: 21,499
Registered: ‎03-29-2007

Re: clearpass Concurrent Session

If you are using ArubaOS 6.5 and above, if you return text in the Radius Reply-Message attribute on ClearPass when you reject a password, it will show up on the captive portal page.. http://www.arubanetworks.com/techdocs/ArubaOS_65x_WebHelp/Web_Help_Index.htm#ArubaFrameStyles/Captive_Portal/Internal_Captive_Portal.htm  

Please see the heading "

Customizing Authentication Reply-Message to Captive Portal Users"



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 44
Registered: ‎11-22-2013

Re: clearpass Concurrent Session

I’m a little bit confused, this is done at the CPPM or at the controller. If at the controller, its running 6.3.x. the CPPM running 6.5.5
Guru Elite
Posts: 21,499
Registered: ‎03-29-2007

Re: clearpass Concurrent Session

The controller must be running AOS 6.5 to display the reply-message attribute from clearpass in the captive portal.  ClearPass can be any version that can send a reply-attribute in a radius response.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 44
Registered: ‎11-22-2013

Re: clearpass Concurrent Session

If the controller upgraded to 6.5, which part of the controller needs to be configured
Guru Elite
Posts: 21,499
Registered: ‎03-29-2007

Re: clearpass Concurrent Session

The controller does not need to be configured.  If you send a radius reject from clearpass along with a message in the reply-message attribute it is displayed on the captive portal page.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 44
Registered: ‎11-22-2013

Re: clearpass Concurrent Session

Currently we are pushing the deny access profile to the user. Any other workaround if using aos 6.3.x ? the main objective is to notify the user they have exceeded the concurrent device limit
Guru Elite
Posts: 21,499
Registered: ‎03-29-2007

Re: clearpass Concurrent Session

Not without javascript:  http://www.arubanetworks.com/techdocs/ArubaOS_65x_WebHelp/Web_Help_Index.htm#ArubaFrameStyles/Captive_Portal/Internal_Captive_Portal.htm#captive_portal_2658586545_1085133



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: