Wireless Access

Reply
New Contributor

Captive Portal Guest Login Tries to Authenticate with MAC Address

We have set up Captive Portal using ClearPass for username and password authentication. The login page kicks in and username and password seem to have been accepted, but access tracker shows that the client is trying to authenticate with MAC address. Naturally authentication fails for obvious reasons. So we need your help to disable MAC authentication and enforce guest login with username and password created in CPPM Guest services.

 

Thanks much,

 

 

Guru Elite

Re: Captive Portal Guest Login Tries to Authenticate with MAC Address

What is the network device?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480

Re: Captive Portal Guest Login Tries to Authenticate with MAC Address

What probably is the issue is that the MAC authentication is hit on the wrong ClearPass service. If you used the wizard, it will create services for MAC authentication as well for MAC caching; if those are not properly configured and the MAC authentication hits the guest user authentication instead, you will get this kind of behavior.

 

If you want to investigate/learn yourself, I'd suggest that you check out the Guest part in this video series: https://community.arubanetworks.com/t5/Security/Aruba-ClearPass-Workshop-Video-series/td-p/291597

 

It shows how to setup all parts of the Guest access, including the services; and what you should expect in the logging.

 

In the case you need a quick fix, contact your Aruba partner or Aruba TAC.

--
If you have urgent issues, please contact your Aruba partner or Aruba TAC (click for contact details).
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: