Wireless Access

Reply
Occasional Contributor I
Posts: 9
Registered: ‎11-17-2014

DeAuth after MAC authentication fails - How?

Hi,

I have a working MAC authentication method on a 3400 controller using the radius server on our HPUX server.

There are no problems with those who are authorised ( ie. MAC addresses in the users DB ).

But, those who fail authentication are met by a page stating "Web Authentication is disabled, Please contact the admin...".

Can I throw them out of the AP as soon as the auth fails? ( I don't know the correct term, "deAuth" or "disassociate"? ).

How?

 

Thanks.

Guru Elite
Posts: 8,637
Registered: ‎09-08-2010

Re: DeAuth after MAC authentication fails - How?

No, because even if you deauth them, they will reassociate. You can put them
in a denyall role however.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I
Posts: 9
Registered: ‎11-17-2014

Re: DeAuth after MAC authentication fails - How?

I see, never thought of that...

I'll try the "deny all role", I am very new to roles, policies etc.

Thanks anyway for your reply.

I'll post the results.

Occasional Contributor I
Posts: 9
Registered: ‎11-17-2014

Re: DeAuth after MAC authentication fails - How?

Hi Cappali,

denyall role solved my problem. 

Thanks for the help

Search Airheads
Showing results for 
Search instead for 
Did you mean: