Wireless Access

last person joined: 12 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Dual Authentication in Aruba

This thread has been viewed 0 times

  • 1.  Dual Authentication in Aruba

    Posted Mar 10, 2017 05:53 AM

    Is there any possibility for dual authentication in Aruba Network?

    I mean if I want to authenticate from MAC address and also from Password ? please tell me possibilty.



  • 2.  RE: Dual Authentication in Aruba

    EMPLOYEE
    Posted Mar 10, 2017 05:59 AM

    Do you mean MAC auth + PSK? 

     

    Yes, that is possible. 



  • 3.  RE: Dual Authentication in Aruba

    Posted Mar 10, 2017 06:00 AM

    how? please tell steps



  • 4.  RE: Dual Authentication in Aruba

    EMPLOYEE
    Posted Mar 10, 2017 06:08 AM

    Are you trying to do dual authenticatoin using CPPM or Aruba controllers?

     

    Regards,

    Pavan



  • 5.  RE: Dual Authentication in Aruba

    Posted Mar 10, 2017 06:10 AM

    no. just normal authentication

    format ad-cd-ef-gh-ij-kl



  • 6.  RE: Dual Authentication in Aruba

    EMPLOYEE
    Posted Mar 10, 2017 06:21 AM

    Here is a sample config that you can copy-paste. Just replace the word "CRYSTAL". Add the allowed mac addresses to the internal-db in the specified format. 

     

    !
!
ip access-list session CRYSTAL-MAC-DENY
any any any deny

user-role CRYSTAL-MAC-DENY
session-acl CRYSTAL-MAC-DENY

ip access-list session CRYSTAL-MAC-ALLOW
any any any permit

user-role CRYSTAL-MAC-ALLOW
session-acl CRYSTAL-MAC-ALLOW

aaa authentication mac CRYSTAL-MAC
case lower
delimiter none


aaa authentication dot1x CRYSTAL-MAC

aaa server-group "CRYSTAL-MAC"
auth-server Internal

aaa profile "CRYSTAL-MAC"
initial-role CRYSTAL-MAC-DENY
mac-default-role CRYSTAL-MAC-ALLOW
authentication-mac CRYSTAL-MAC
mac-server-group CRYSTAL-MAC
authentication-dot1x "CRYSTAL-MAC"

wlan ht-ssid-profile "CRYSTAL-MAC" 

wlan ssid-profile "CRYSTAL-MAC"
essid "CRYSTAL-MAC"
wpa-passphrase password@12345
opmode wpa2-psk-aes 
ht-ssid-profile "CRYSTAL-MAC" 

wlan virtual-ap "CRYSTAL-MAC"
aaa-profile "CRYSTAL-MAC"
ssid-profile "CRYSTAL-MAC"

!
!

     

     



  • 7.  RE: Dual Authentication in Aruba

    Posted Mar 11, 2017 12:49 AM

    Dear Rajaguru Vincent

     

    I am using aruba controller no CPPM.

    Please suggest



  • 8.  RE: Dual Authentication in Aruba

    EMPLOYEE
    Posted Mar 11, 2017 11:09 AM

    That config does not require CPPM. 

     

     

     



  • 9.  RE: Dual Authentication in Aruba

    Posted Mar 13, 2017 09:00 AM

    Just wondering why do you want to do this?

    Just use some kind of strong authentication like EAP TLS


    MAc authentication add almost no security because its easy to clone it, it does not scale  past a handful of devices becuase is difficult to maintain a list of mac addreses.

     

    Just my 2 cents :)

     

    Cheers

    Carlos