Wireless Access

Reply
Contributor I

Tracking down user

I need some help tracking down a user based on IP. Yesterday morning someone using 192.168.10.193 had some suspicous activity on our guest network. We have a 650 controller doing DHCP for the network but the lease is only 4 hours. We also have AirWave and ClearPass doing guest authentication. We authenticate against a local user database on ClearPAss so it has to be someone we gratned access to. Any tips in tracking them down?

Guru Elite

Re: Tracking down user

Do you return the username to the controller on your guest network? If so, you should be able to search AirWave by IP address and it will give you all the users that had that IP.


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Contributor I

Re: Tracking down user

Perfect thanks!

 

Tracked him down there will be a public stoning with old BlackBerries tomorrow!

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: