Wireless Access

Hi,

I recently implemented applying different user roles for client authentication in clearpass and controller, is there a way to monitor/track client authentions and displaying appropriate role against their authentication instead of drilling into user output on the controller or clearpass.

In airwave, or aruba controller, what would you recommend?

I created a couple of new roles, but they don't seem to be on the list In airwave or controller. Is there a way admins can get an alert when a role is no longer applied after user authentication?

Where did you create these roles?  Only user debugging on the controller will reveal a user being assigned a default role, because the role passed does not exist.

In Clearpass and controller. On the controller- dashboard- client link it shows a list of users and one of the column shows the role you will notice it got just three of the 8 user roles created on display,( authenticated, guest and uswitc..AN_Role) I would like to see a display of the appropriate roles applied to users. see attached file.

As I intend putting it up on the dashboard using airwave.

Attachment(s)

Demo.docx   64 KB 1 version

There is no direct correlation between the roles in clearpass and the user roles in the controller.  Users get a default role in the controller unless you send a Aruba-User-Role attribute in an enforcement profile on ClearPass to the controller specifying the role you want users to get.  Again, the roles in Clearpass are for ClearPass' own logic and do not directly correlate to roles in the controller.

Yes, I did set an Aruba-User-Role attribute in an enforcement profile on ClearPass to the controller specifying the role I want users to get
it all works, but am exploring a means to display information showing list of authenticated users with the appropriate custom role applied in own column when the controller is clicked on in airwave monitoring system to view connected devices currently, the role column just shows authenticated, even though the custom user-role is applied.

That column in Airwave should only have the user's current role, whatever it is.  Please open a TAC case to make sure you have not run into a bug:

http://www.arubanetworks.com/support-services/support-program/contact-support