Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass MAC auto populate from FortiGate

This thread has been viewed 33 times
  • 1.  ClearPass MAC auto populate from FortiGate

    Posted Sep 03, 2021 12:33 PM
    Hi,

    Have successfully configured an external portal from a FortiGate appliance to a ClearPass Guest Self Registration page to allow users to create devices.

    Looking to get the MAC address field auto populated but struggling.

    Using redirect from 2930F & 5130 switches is working well and auto populates but also need to get a solution in place for external portal redirection from a FortiGate.

    The format of the portal redirect is below. How can I grab the usermac= value from browser to populate the MAC address field on CPPM form?

    https://reg.sid.cam.ac.uk/guest/register.php?login&post=http://<CPPM>:1000/fgtauth&magic=<randomvalues>&usermac=00:00:00:00:00:00&apmac=<MAC>&apip=<FGT-IP>&userip=<Client-IP>&ssid=<VLAN-Interface>&apname=<FortiGate-Model>&bssid=00:00:00:00:00:00&_browser=1

    Any help much appreciated.


    Thank you.

    ------------------------------
    Carl Morgan
    ------------------------------


  • 2.  RE: ClearPass MAC auto populate from FortiGate
    Best Answer

    EMPLOYEE
    Posted Sep 05, 2021 02:14 AM
    ​Hey Carl,

    If it's a registration page then update the mac address filed ( Initial value ) and enable always use the initial value checkbox.

    array (  'generator' => 'GeneratorFromSession',  'generator_args' =>   array (    0 => 'extra_fields',    1 => 'usermac',  ),) 



    Additionally, if you would like to make use of any attribute from the URL you could pass the below smarty code either in the Header or Footer section of the page and could build your own query like above.

    {dump var=$smarty.session export=1 html=1}

    ------------------------------
    SANDEEP YADAV
    Global Escalation Center, ACCP | Aruba Software
    ------------------------------



  • 3.  RE: ClearPass MAC auto populate from FortiGate

    Posted Sep 06, 2021 08:50 AM
    Worked like a charm, Thank you

    ------------------------------
    Carl Morgan
    ------------------------------