Wireless Access

Reply
Occasional Contributor I
Posts: 5
Registered: ‎03-03-2017

Dual Authentication in Aruba

Is there any possibility for dual authentication in Aruba Network?

I mean if I want to authenticate from MAC address and also from Password ? please tell me possibilty.

Aruba Employee
Posts: 151
Registered: ‎02-14-2013

Re: Dual Authentication in Aruba

Do you mean MAC auth + PSK? 

 

Yes, that is possible. 

Thanks,
Rajaguru Vincent
Occasional Contributor I
Posts: 5
Registered: ‎03-03-2017

Re: Dual Authentication in Aruba

how? please tell steps

Aruba Employee
Posts: 180
Registered: ‎02-19-2015

Re: Dual Authentication in Aruba

Are you trying to do dual authenticatoin using CPPM or Aruba controllers?

 

Regards,

Pavan

Occasional Contributor I
Posts: 5
Registered: ‎03-03-2017

Re: Dual Authentication in Aruba

no. just normal authentication

format ad-cd-ef-gh-ij-kl

Aruba Employee
Posts: 151
Registered: ‎02-14-2013

Re: Dual Authentication in Aruba

Here is a sample config that you can copy-paste. Just replace the word "CRYSTAL". Add the allowed mac addresses to the internal-db in the specified format. 

 

!
!
ip access-list session CRYSTAL-MAC-DENY
any any any deny

user-role CRYSTAL-MAC-DENY
session-acl CRYSTAL-MAC-DENY

ip access-list session CRYSTAL-MAC-ALLOW
any any any permit

user-role CRYSTAL-MAC-ALLOW
session-acl CRYSTAL-MAC-ALLOW

aaa authentication mac CRYSTAL-MAC
case lower
delimiter none


aaa authentication dot1x CRYSTAL-MAC

aaa server-group "CRYSTAL-MAC"
auth-server Internal

aaa profile "CRYSTAL-MAC"
initial-role CRYSTAL-MAC-DENY
mac-default-role CRYSTAL-MAC-ALLOW
authentication-mac CRYSTAL-MAC
mac-server-group CRYSTAL-MAC
authentication-dot1x "CRYSTAL-MAC"

wlan ht-ssid-profile "CRYSTAL-MAC" 

wlan ssid-profile "CRYSTAL-MAC"
essid "CRYSTAL-MAC"
wpa-passphrase password@12345
opmode wpa2-psk-aes 
ht-ssid-profile "CRYSTAL-MAC" 

wlan virtual-ap "CRYSTAL-MAC"
aaa-profile "CRYSTAL-MAC"
ssid-profile "CRYSTAL-MAC"

!
!

 

 

Thanks,
Rajaguru Vincent
Occasional Contributor I
Posts: 5
Registered: ‎03-03-2017

Re: Dual Authentication in Aruba

Dear Rajaguru Vincent

 

I am using aruba controller no CPPM.

Please suggest

Aruba Employee
Posts: 151
Registered: ‎02-14-2013

Re: Dual Authentication in Aruba

That config does not require CPPM. 

 

 

 

Thanks,
Rajaguru Vincent
MVP
Posts: 2,954
Registered: ‎10-25-2011

Re: Dual Authentication in Aruba

[ Edited ]

Just wondering why do you want to do this?

Just use some kind of strong authentication like EAP TLS


MAc authentication add almost no security because its easy to clone it, it does not scale  past a handful of devices becuase is difficult to maintain a list of mac addreses.

 

Just my 2 cents :)

 

Cheers

Carlos

----------------------------------------------------
Product Manager - Aruba Networks
Alternetworks Corp
Search Airheads
Showing results for 
Search instead for 
Did you mean: