Hi all,I used the Clearpass services wizard to setup a Guest wi-fi with MAC caching. In Clearpass this creates two services. One for MAC authentication and one for the guest authentication. I also used setup a new WLAN on my Aruba controller cluster. When my client tries to connect, I get the captive portal, I enter my guest username and password and the request is refused.I check in Access tracker and the service for Guest authentication has no attributes in the radius request. Only username. no AP name where the request came in, no nothing. In the MAC authentication service, I get all the attributes for the device. Device type, OS, service, etc. This also fails but I would suspect that since I haven't logged in yet.Does anyone have any ideas why the radius request is not matching the service or the request not have any attributes?
Actually, I think this might be more on the controller side. Something is missing in one of the controller profiles and the Client-Station-ID is not being sent. Anyone have any ideas?
it looks like you have enabled pre-auth check "using Aruba Application Authentication" in weblogin, that's why you see application as source in access trackeryou can set the pre-auth check to use RADIUS or dont have it at all.in your current setup you need to configure an additional webauth service
Thanks ariyap that was it I changed pre-auth from application to RADIUS in the web login page. Now I'm authenticating. I have a few more things to figure out now. Now that I'm logged into the guest wi-fi, the captive portal window redirect to the Clearpass login page. That should probably go to our main web site. Also, the MAC authentication server is not matching and I have to log in each time. Thanks again.
© Copyright 2023 Hewlett Packard Enterprise Development LPAll Rights Reserved.