Cloud Managed Networks

Hey all - 

I'm in the process of setting up Aruba VIA on a virtual controller hosted in Azure.  I want to setup MFA using Microsoft Azure MFA using push notifications.  The only way i've seen to do this is by sending the Auth sessions to CPPM over Radius and then to proxy the Radius requests to the NPS server which handles the auth against Azure AD.  I got it pretty much working but the EAP time out is so short that its a race against my fingers to accept the push notification before it fails and restarts the auth attempt.  Anyone else set something like this up and can help point me in the direction to increase the EAP timeout setttings to something like 50-60 seconds?

Thanks,

Adam

------------------------------
Adam Osiol
------------------------------

I don't think there is any external API/other interfaces available to use with any product other than NPS server?


------------------------------
Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba.
------------------------------

Original Message:
Sent: Mar 31, 2021 05:55 PM
From: Adam Osiol
Subject: Aruba VIA using Azure MFA using CPPM and NPS w/ Azure MFA extension

Hey all - 

I'm in the process of setting up Aruba VIA on a virtual controller hosted in Azure.  I want to setup MFA using Microsoft Azure MFA using push notifications.  The only way i've seen to do this is by sending the Auth sessions to CPPM over Radius and then to proxy the Radius requests to the NPS server which handles the auth against Azure AD.  I got it pretty much working but the EAP time out is so short that its a race against my fingers to accept the push notification before it fails and restarts the auth attempt.  Anyone else set something like this up and can help point me in the direction to increase the EAP timeout setttings to something like 50-60 seconds?

Thanks,

Adam

------------------------------
Adam Osiol
------------------------------

Did you find this VIA TechNote on Azure MFA?

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.
------------------------------

Original Message:
Sent: Mar 31, 2021 05:55 PM
From: Adam Osiol
Subject: Aruba VIA using Azure MFA using CPPM and NPS w/ Azure MFA extension

Hey all - 

I'm in the process of setting up Aruba VIA on a virtual controller hosted in Azure.  I want to setup MFA using Microsoft Azure MFA using push notifications.  The only way i've seen to do this is by sending the Auth sessions to CPPM over Radius and then to proxy the Radius requests to the NPS server which handles the auth against Azure AD.  I got it pretty much working but the EAP time out is so short that its a race against my fingers to accept the push notification before it fails and restarts the auth attempt.  Anyone else set something like this up and can help point me in the direction to increase the EAP timeout setttings to something like 50-60 seconds?

Thanks,

Adam

------------------------------
Adam Osiol
------------------------------