07-04-2017 07:12 AM
We have set up Captive Portal using ClearPass for username and password authentication. The login page kicks in and username and password seem to have been accepted, but access tracker shows that the client is trying to authenticate with MAC address. Naturally authentication fails for obvious reasons. So we need your help to disable MAC authentication and enforce guest login with username and password created in CPPM Guest services.
Solved! Go to Solution.
07-05-2017 01:21 AM
What probably is the issue is that the MAC authentication is hit on the wrong ClearPass service. If you used the wizard, it will create services for MAC authentication as well for MAC caching; if those are not properly configured and the MAC authentication hits the guest user authentication instead, you will get this kind of behavior.
If you want to investigate/learn yourself, I'd suggest that you check out the Guest part in this video series: https://community.arubanetworks.com/t5/Security/Aruba-ClearPass-Workshop-Video-series/td-p/291597
It shows how to setup all parts of the Guest access, including the services; and what you should expect in the logging.
In the case you need a quick fix, contact your Aruba partner or Aruba TAC.
If you have urgent issues, please contact your Aruba partner or Aruba TAC (click for contact details).