Wireless Access

Reply
Frequent Contributor II

Controller client session log

Hi,

 

1) How can i get existing user session loging details on the controller.?

2) How many last user session log details i can find on controller?

 

Regards,

Nik..

 

Guru Elite

Re: Controller client session log

The controller will show all active sessions.



Historical information would require AirWave or you can look at RADIUS logs.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Frequent Contributor II

Re: Controller client session log

Hi,

We have ClearPass as a radius.

Actually, 3 SSID(EMPL, CORP & GUEST) configured on controller. For guest SSID we have enabled interface NAT(controller IP) & we allowed only http & https traffic for controller IP through Checkpoint firewall.

WIP is not enabled on controller.

 

Yesterday we got vurnability alert from checkpoint firewall that, source IP (Controller IP) destination (Public IP). But i could not find out actual source IP on the controller.

How can i find out that? if this issue occur again? 

 

Regards,

Nik...

Guru Elite

Re: Controller client session log

You'd either need to look in the RADIUS accounting logs or in AirWave for the private IP but it likely won't help you with the PAT to private IP mapping. If NAT logging is critical, you should consider doing NAT upstream.


Thanks,
Tim

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Valued Contributor II

Re: Controller client session log

Hi,

 

You can get only current user sessions in the controller , for the history for a period of time, you need to use Airwave, if you are using IAP terminating on the Central you can get from Central.

To get the active user sessions, you can use the following command, "show user-table"

 

Please feel free for any further help on this.

 

Cheers,
Venu Puduchery,
[Is my post helped you ? Give Kudos :) ]
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: