Security

Hi all,
I used the Clearpass services wizard to setup a Guest wi-fi with MAC caching.  In Clearpass this creates two services.  One for MAC authentication and one for the guest authentication.  I also used setup a new WLAN on my Aruba controller cluster. 

When my client tries to connect, I get the captive portal, I enter my guest username and password and the request is refused.

I check in Access tracker and the service for Guest authentication has no attributes in the radius request.  Only username.  no AP name where the request came in, no nothing.  In the MAC authentication service, I get all the attributes for the device.  Device type, OS, service, etc.  This also fails but I would suspect that since I haven't logged in yet.

Does anyone have any ideas why the radius request is not matching the service or the request not have any attributes?

Hi all,
I used the Clearpass services wizard to setup a Guest wi-fi with MAC caching.  In Clearpass this creates two services.  One for MAC authentication and one for the guest authentication.  I also used setup a new WLAN on my Aruba controller cluster. 

When my client tries to connect, I get the captive portal, I enter my guest username and password and the request is refused.

I check in Access tracker and the service for Guest authentication has no attributes in the radius request.  Only username.  no AP name where the request came in, no nothing.  In the MAC authentication service, I get all the attributes for the device.  Device type, OS, service, etc.  This also fails but I would suspect that since I haven't logged in yet.

Does anyone have any ideas why the radius request is not matching the service or the request not have any attributes?

Hi all,
I used the Clearpass services wizard to setup a Guest wi-fi with MAC caching.  In Clearpass this creates two services.  One for MAC authentication and one for the guest authentication.  I also used setup a new WLAN on my Aruba controller cluster. 

When my client tries to connect, I get the captive portal, I enter my guest username and password and the request is refused.

I check in Access tracker and the service for Guest authentication has no attributes in the radius request.  Only username.  no AP name where the request came in, no nothing.  In the MAC authentication service, I get all the attributes for the device.  Device type, OS, service, etc.  This also fails but I would suspect that since I haven't logged in yet.

Does anyone have any ideas why the radius request is not matching the service or the request not have any attributes?

Actually, I think this might be more on the controller side.  Something is missing in one of the controller profiles and the Client-Station-ID is not being sent.  Anyone have any ideas?

Hi all,
I used the Clearpass services wizard to setup a Guest wi-fi with MAC caching.  In Clearpass this creates two services.  One for MAC authentication and one for the guest authentication.  I also used setup a new WLAN on my Aruba controller cluster. 

When my client tries to connect, I get the captive portal, I enter my guest username and password and the request is refused.

I check in Access tracker and the service for Guest authentication has no attributes in the radius request.  Only username.  no AP name where the request came in, no nothing.  In the MAC authentication service, I get all the attributes for the device.  Device type, OS, service, etc.  This also fails but I would suspect that since I haven't logged in yet.

Does anyone have any ideas why the radius request is not matching the service or the request not have any attributes?

it looks like you have enabled pre-auth check "using Aruba Application Authentication" in weblogin, that's why you see application as source in access tracker
you can set the pre-auth check to use RADIUS or dont have it at all.
in your current setup you need to configure an additional webauth service 

Actually, I think this might be more on the controller side.  Something is missing in one of the controller profiles and the Client-Station-ID is not being sent.  Anyone have any ideas?

Hi all,
I used the Clearpass services wizard to setup a Guest wi-fi with MAC caching.  In Clearpass this creates two services.  One for MAC authentication and one for the guest authentication.  I also used setup a new WLAN on my Aruba controller cluster. 

When my client tries to connect, I get the captive portal, I enter my guest username and password and the request is refused.

I check in Access tracker and the service for Guest authentication has no attributes in the radius request.  Only username.  no AP name where the request came in, no nothing.  In the MAC authentication service, I get all the attributes for the device.  Device type, OS, service, etc.  This also fails but I would suspect that since I haven't logged in yet.

Does anyone have any ideas why the radius request is not matching the service or the request not have any attributes?