Security

Reply

seft register access question

It is possible to lock the self register access for eachdevjce juat to authenticate 3 times a day?

for exmaple a user juat can self register to the wifi 3 timea... If he try another one then it wont let him

cheers
Carlos
----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp

Re: seft register access question

If I understand this correctly, you want a guest to only be allowed to register 3 devices on the guest wireless correct?  Yes - this is possible  It is a setting in the Service template you create on the guest authentication in CPPM

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos

Re: seft register access question

No

i want htat one device be able to selft register 3 times a day only.

 

For example

If i come with my ipad and i selft register i get access to the internet

If i come again and selft register for another time i get access for another hour

If i come to selft register again  i get one more hour

If i come a 4th time to selft register... it wont let me.   But just for the day...  what i mean that tomorrow the client is able selft register agian 3 more times.

 

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp

Re: seft register access question

OK...well you can add the Insight DB as an authorization source and then limit the amount of logins per day.  I am not sure (haven't tested) if you can limit the amount of registrations but we can limit how many times someone can login to the network.  

 

Screenshot 2014-05-09 15.19.21.png

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos

Re: seft register access question

Where you can specify its per day in there???


Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp

Re: seft register access question

That count that you see from the screenshot is the amount of times since midnight
Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos

Re: seft register access question

By default its like that ¿? its something you cannot change?(this question is just curiosity) i dont need this

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp

Re: seft register access question

No - you cannot change that...there are other variables that may make sense in conjunction with that counter though like:

 

Insight:Time-Since-Last-Auth is less than 24 hours (example) ==  allow network access

Insight:Time-Since-Last-Auth is greater than 24 hours (example) ==  Redirect to page

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos

Re: seft register access question

So i should build another enforment rule which state that if the succesful logins is 3  it should give  deny access?

 

For example i got this

CPGuest.JPG

 

So i should add the insigh repository here

 

 

Then i should make a role here which state that if the login atthemp is less than 3 then put him the role of login attemps like this

role.JPG

Then on the enforment it should state that if he get that role to give him a denny access policy like this

enforment.JPG

 

Is the configuration correct or its wrong??

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp

Re: seft register access question

It looks ok...but I think the operand should be greater than 3 and not less than 3.  Configured as you have it, no one will ever get access!

 

Your other option is to provide another role back (not just deny access) with a web page redirect saying that they got there because of the excessive logins per day...just a thought.

Seth R. Fiermonti
Consulting Systems Engineer - ACCX, ACDX, ACMX
Email: seth@hpe.com
-----
If you found my post helpful, please give kudos
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: