Wireless Access

Reply
Occasional Contributor II
Posts: 11
Registered: ‎06-27-2012

mac address authentication problems

I have an Aruba 650 controller with version 6.2.1.1.
I need to set up two wireless networks, one with mac address authentication only and the other with mac address authentication and captive portal.
I'm not getting the mac address is authenticated. Can you help me?

Guru Elite
Posts: 21,517
Registered: ‎03-29-2007

Re: mac address authentication problems

What have you configured already and what is not working?  We do not have enough information to help you.



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 11
Registered: ‎06-27-2012

Re: mac address authentication problems

I have both configured SSID, and another one in Open Open with Captive Portal.
Then I followed the manual transmission attached.

Best regards,

ccarrico

Guru Elite
Posts: 21,517
Registered: ‎03-29-2007

Re: mac address authentication problems

turn on user debugging:

 

config t
logging level debug user

 

 

Disable the client's wireless card then delete the client from the user table:

 

aaa user delete mac <mac address of user>

 Enable the user's wireless card to attach it to the network, then display the logs for that user to determine what is happening:'

 

show log user 50

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 11
Registered: ‎06-27-2012

Re: mac address authentication problems

I did the procedure you asked me, send attached result (log)

Best regards,

ccarrico
.

Guru Elite
Posts: 21,517
Registered: ‎03-29-2007

Re: mac address authentication problems

it says "

Jun 5 16:25:09 :522190:  <DBUG> |authmgr|  MAC=6c:e9:07:dd:c3:3a IP=0.0.0.0: MAC auth fail: entry-type=L2, bssid=6c:f3:7f:49:84:30.

 

Is that the device?  What format are you using for the mac addresses?  Is that format in the mac authentication profile?  Did you enter the mac address in the internal database with username and password in the same format?

 

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Occasional Contributor II
Posts: 11
Registered: ‎06-27-2012

Re: mac address authentication problems

Right now my problem is that the user exists or not created, it always has access to the internet

Best regards,

ccarrico

Guru Elite
Posts: 21,517
Registered: ‎03-29-2007

Re: mac address authentication problems

 

 

A user will ALWAYS get the initial role of the AAA profile that he is attached to.  If you make this a "deny all" profile that has no acls, users that do NOT pass mac authentication will end up in this role.  Users that do pass, will be assigned the mac authentication user role, OR the role assigned to their mac address in the local user database.

 

It will be quite painful to expose all of the options available to you on the forum here, so I suggest you open a TAC case if you want quick, concise support.

 



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Search Airheads
Showing results for 
Search instead for 
Did you mean: