Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Sending aruba-mdps-device-imei to FreeRadius

This thread has been viewed 1 times
  • 1.  Sending aruba-mdps-device-imei to FreeRadius

    Posted Nov 19, 2016 04:36 AM

    Hi!

    I have the controller sending some Aruba´s information to the freeradius and I am already storing them at mysql database, for example: Aruba_Location_ID.

     

    I am trying to do the same for aruba-mdps-device-imei, but it does not shows at Freeradius.

     

    I have already checked the version of ArubaOS and it shows the aruba-mdps-device-imei attribute and I have already added the aruba-mdps-device-imei attribute to the dictionary.

     

    Could you please help me?

     

    Best Regards,

    Marcos

     

     



  • 2.  RE: Sending aruba-mdps-device-imei to FreeRadius

    EMPLOYEE
    Posted Nov 19, 2016 08:04 AM

    That attribute is specifically for the Onboard module in ClearPass, and is not used outside of that context.  When a device is Onboarded, the onboard app on that device reads the imei.  Again, this attribute would not be available outside of the Onboard module of ClearPass.



  • 3.  RE: Sending aruba-mdps-device-imei to FreeRadius

    EMPLOYEE
    Posted Nov 19, 2016 10:05 AM
    That attribute is not generated by the controller.


  • 4.  RE: Sending aruba-mdps-device-imei to FreeRadius

    Posted Nov 19, 2016 02:52 PM
    Ok thanks!

    We have a system that blocks mac address, but I think that users are changing mac.

    Do you know any other way to block them?

    Thanks


  • 5.  RE: Sending aruba-mdps-device-imei to FreeRadius

    EMPLOYEE
    Posted Nov 19, 2016 05:05 PM

    You should use something more secure than mac authentication, like 802.1x



  • 6.  RE: Sending aruba-mdps-device-imei to FreeRadius

    Posted Nov 22, 2016 07:07 AM
    Hi!

    This is our guest network, employee must be able to create guest users, but they are creating for themselves and now they are changing Wifi Mac from their cel phones, so I cannot block them anymore.

    I´ve been trying to find something else to block them, like IMEI.

    Any other idea please?


  • 7.  RE: Sending aruba-mdps-device-imei to FreeRadius

    EMPLOYEE
    Posted Nov 22, 2016 09:33 AM

    How many people know how to change the mac address on their cell phones?



  • 8.  RE: Sending aruba-mdps-device-imei to FreeRadius

    EMPLOYEE
    Posted Nov 22, 2016 09:36 AM

    A solution like ClearPass could help you build policy to prevent things like this.