Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Servie selection based upon ssid

This thread has been viewed 19 times
  • 1.  Servie selection based upon ssid

    MVP EXPERT
    Posted Nov 30, 2021 05:53 AM
    Hi All,
    Quick question,  When creating  a cppm service specific to a given SSID, up till now i've been using the Radius:Aruba  SSID attribute  (Aruba-ESSID-Name)  to "tie" a service to an ssid.

    Given that  you can also use Connection / SSID/ equals ........

    Why use one over the other ... other than not using Aruba wifi kit ?


    Rgds
    Alex

    ------------------------------
    Alex Sharaz
    ------------------------------


  • 2.  RE: Servie selection based upon ssid

    EMPLOYEE
    Posted Nov 30, 2021 07:41 AM
    I didn't know the Connection:SSID existed. Would not know why to use one or the other... there are more things in ClearPass that you can do in multiple ways.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 3.  RE: Servie selection based upon ssid

    Posted Dec 01, 2021 03:53 AM
    Yes I agree, always multiple ways to do the same thing - don't believe there is a right and wrong way.
    In this instance we've always used standard Radius - Called-station-id - contains "SSID" - That's obviously if your solution is including the SSID in the Called Station ID - which is often an additional setting.


  • 4.  RE: Servie selection based upon ssid

    MVP EXPERT
    Posted Dec 01, 2021 09:04 AM
    o.k. another way :-)

    We have that option to append the SSID to the casing station id disabled

    Forgot about that
    A




  • 5.  RE: Servie selection based upon ssid

    MVP EXPERT
    Posted Dec 01, 2021 08:19 PM
    Connection:SSID is derived and works regardless of vendor (assuming the vendor sends the SSID in CSID or a VSA)

    ------------------------------
    Tim C
    ------------------------------



  • 6.  RE: Servie selection based upon ssid

    MVP EXPERT
    Posted Dec 02, 2021 03:20 AM
    Thats what I assumed :-)