Security

Reply
Occasional Contributor I
Posts: 6
Registered: ‎12-06-2011

wifi-controler rules

I have creed a guest_20M  account on the controler for a user  with 20m download but the controler get the deault guest role

on aruba controler creed a guest_20M  account but the user is always login in the default guest account

Aruba Employee
Posts: 571
Registered: ‎04-17-2009

Re: wifi-controler rules


epianon wrote:

I have creed a guest_20M  account on the controler for a user  with 20m download but the controler get the deault guest role

on aruba controler creed a guest_20M  account but the user is always login in the default guest account


So you need to do one of two things. Either change the default guest role to your new guest_20M (this all depends on how your authitication is done: internal DB, RADIUS, etc), or set the bandwidth limit on the "guest" role.

Thanks,

Zach Jennings
Occasional Contributor I
Posts: 6
Registered: ‎12-06-2011

Re: wifi-controler rules

It's not possible to change the default guest rules then this is just for the
Guest with a up-download 512kb , and the guest_20mb is for an special
Guest with an up-download for 20 MB , with a login and pw in the internal
DB
The goal is that the special guest gets a faster internet connection
Aruba Employee
Posts: 571
Registered: ‎04-17-2009

Re: wifi-controler rules

Just change the role on the Internal DB user accounts to that new role you created. Then when they login, they should get that guest_20mb role.

Thanks,

Zach Jennings
Occasional Contributor I
Posts: 6
Registered: ‎12-06-2011

Re: wifi-controler rules

That what i have done , but when the spetial guest enter his login and pw he
Is going in the default guest role and not in the guest roles guest_20M
Aruba Employee
Posts: 571
Registered: ‎04-17-2009

Re: wifi-controler rules

Please run the following command and post the output (this assumes you are doing captive portal for guest access):

 

#show aaa authentication captive-portal Your-CP-Profile-Name-Here

 

 

"Guest Login" should be Disabled in this profile. If this is enabled, it allows guests to login without authentication.

Thanks,

Zach Jennings
Occasional Contributor I
Posts: 6
Registered: ‎12-06-2011

Re: wifi-controler rules

 

Guest Login is disable

MVP
Posts: 762
Registered: ‎03-25-2009

Re: wifi-controler rules

Does the role configured for a user in the internal database always gets preference over the default role configured in the captive portal profile when using the internal dbase for the authentication?

 

Because that's what's happening.. the default role from the CP-profile (guest) is getting applied to the user instead of the user-role (guest_20M) configured for the user in it's internal dbase record.

 

 

 

(Aruba3600) #show local-userdb       


User Summary
------------
Name       Password  Role         E-Mail  Enabled  Expiry  Status  Sponsor-Name  Remote-IP  Grantor-Name
----       --------  ----         ------  -------  ------  ------  ------------  ---------  ------------
guest4825  xpkt0955  guest_20M            Yes              Active                0.0.0.0    admin

User Entries: 1

(Aruba3600) #show aaa authentication captive-portal default

Captive Portal Authentication Profile "default"
-----------------------------------------------
Parameter                                     Value
---------                                     -----
Default Role                                  guest
Default Guest Role                         blocked

 

Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Occasional Contributor I
Posts: 6
Registered: ‎12-06-2011

Re: wifi-controler rules

the default guest role is guest , how to change it 

MVP
Posts: 762
Registered: ‎03-25-2009

Re: wifi-controler rules

To change the default role simply change it in the captive-portal profile (Configuration > Security > Authentication > L3 Authentication > Captive Portal Authentication Profile) and change the Default Role of the captive portal which role you want to change.

 

Or in CLI:

(Aruba) #show aaa authentication captive-portal

Captive Portal Authentication Profile List
------------------------------------------
Name                            References  Profile Status
----                            ----------  --------------
default                         0                   
test-cp_prof                    1           


(Aruba) #show aaa authentication captive-portal test-cp_prof

(Hepcut-Master) #configure terminal 
Enter Configuration commands, one per line. End with CNTL/Z

(config) #aaa authentication captive-portal test-cp_prof default-role ?
<default-role>          Assign default role
Koen (ACMX #351 | ACDX #547 | ACCP)

-- Found something helpful, important, or cool? Click the Kudos Star in a post.
-- Problem Solved? Click "Accept as Solution" in a post.
Search Airheads
Showing results for 
Search instead for 
Did you mean: