Wireless Access

Reply
New Contributor
Posts: 3
Registered: ‎11-19-2016

Sending aruba-mdps-device-imei to FreeRadius

Hi!

I have the controller sending some Aruba´s information to the freeradius and I am already storing them at mysql database, for example: Aruba_Location_ID.

 

I am trying to do the same for aruba-mdps-device-imei, but it does not shows at Freeradius.

 

I have already checked the version of ArubaOS and it shows the aruba-mdps-device-imei attribute and I have already added the aruba-mdps-device-imei attribute to the dictionary.

 

Could you please help me?

 

Best Regards,

Marcos

 

 

Guru Elite
Posts: 21,269
Registered: ‎03-29-2007

Re: Sending aruba-mdps-device-imei to FreeRadius

That attribute is specifically for the Onboard module in ClearPass, and is not used outside of that context.  When a device is Onboarded, the onboard app on that device reads the imei.  Again, this attribute would not be available outside of the Onboard module of ClearPass.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite
Posts: 8,637
Registered: ‎09-08-2010

Re: Sending aruba-mdps-device-imei to FreeRadius

That attribute is not generated by the controller.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
New Contributor
Posts: 3
Registered: ‎11-19-2016

Re: Sending aruba-mdps-device-imei to FreeRadius

Ok thanks!

We have a system that blocks mac address, but I think that users are changing mac.

Do you know any other way to block them?

Thanks
Guru Elite
Posts: 21,269
Registered: ‎03-29-2007

Re: Sending aruba-mdps-device-imei to FreeRadius

You should use something more secure than mac authentication, like 802.1x



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

New Contributor
Posts: 3
Registered: ‎11-19-2016

Re: Sending aruba-mdps-device-imei to FreeRadius

Hi!

This is our guest network, employee must be able to create guest users, but they are creating for themselves and now they are changing Wifi Mac from their cel phones, so I cannot block them anymore.

I´ve been trying to find something else to block them, like IMEI.

Any other idea please?
Guru Elite
Posts: 21,269
Registered: ‎03-29-2007

Re: Sending aruba-mdps-device-imei to FreeRadius

How many people know how to change the mac address on their cell phones?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Guru Elite
Posts: 8,637
Registered: ‎09-08-2010

Re: Sending aruba-mdps-device-imei to FreeRadius

A solution like ClearPass could help you build policy to prevent things like this.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
Showing results for 
Search instead for 
Did you mean: