Security

 View Only
last person joined: 13 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Configure Freeradius with MPSK

This thread has been viewed 41 times

  • 1.  Configure Freeradius with MPSK

    Posted Oct 07, 2021 11:53 AM
    Hi,

    we have a freeradius Server and would like to use it with our ArubaOS AccessPoints. Using ArubaMM-VA, 8.5.0.10 MOBILITY MASTER.

    thanks a lot


    ------------------------------
    cs-tech cs-tech
    ------------------------------


  • 2.  RE: Configure Freeradius with MPSK

    MVP EXPERT
    Posted Oct 07, 2021 12:10 PM
    I believe that MPSK is only supported by using Aruba ClearPass as authentication server.

    The RADIUS "accept" message contains aruba vendor specific attributes like this. 

    Radius:Aruba:Aruba-MPSK-Passphrase **********
    Radius:Aruba:Aruba-User-Role cppm-guest
    Radius:Aruba:Aruba-User-Vlan 202
    Radius:IETF:User-Name admin


    ------------------------------
    Marcel Koedijk | MVP Guru 2021 | ACEP | ACMP | ACCP | ACDP | Ekahau ECSE | Not an HPE Employee | Opionions are my own
    ------------------------------

    Original Message


  • 3.  RE: Configure Freeradius with MPSK

    Posted Oct 08, 2021 08:02 AM
    Hi,

    the VSA are already included in the freeradius-common package! /usr/share/freeradius/dictionary.aruba
    I was also able to perform an AAA Server Test, see the screenshot.


    AAA Server Test


    ------------------------------
    cs-tech cs-tech
    ------------------------------

    Original Message