Wireless Access

Occasional Contributor I

two factor authentication

I am having my first IT audit since installing the Aruba system.  We have a small location with a 650 controller and APs.  they had few concerns with the guest network, however the employee network that we use for ipad connections they had issues.  We use a Radius server for Active Directory authentication, however they want to add another layer.  is there a way to have a white list of MAC address for clients that can access the system, and still require the user to log in?  

Guru Elite

Re: two factor authentication

You could add a mac authentication profile and a mac authentication server group (usually internal) to the AAA profile and then make the default mac authentication role the "logon" role.


This will forward them to a webpage where they would be forced to authenticate.


Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.
Search Airheads
Showing results for 
Search instead for 
Did you mean: