Security

last person joined: 9 hours ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

  • 1.  Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 06:59 AM

    I need to configure guest mac authentication. For this  i have setup the guest mac authentication wizard , this wizard gives me two services

     

    1. Guest MAC-Auth Service Guest MAC Authentication
    2. Guest MAC-Auth Service Guest Access With MAC Caching

    I am not triggring the guest mac-authentication service. howerver i have configured the controller/SSID during the clearpass guest mac authentication wizard.

     

     



  • 2.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 07:15 AM
    In the controller Config make sure you add ClearPass as your authentication server for Mac auth and you also need to add a Mac Auth profile

    This is under your guest aaa profile


  • 3.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 07:24 AM

    Already added the clearpass in the server group and also for the authentication server group. Also added the mac-authentication profile in the aaa profile.

     

    Still getting errror. guest person is not authenticated.



  • 4.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 07:29 AM
    Quick question , are you seeing this on the initial guest Mac Auth ?


  • 5.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 07:34 AM

    I want to configure guest mac authentication. When my guest get connected to the SSID it doesnt shows any output on the access tracker.

     



  • 6.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 07:38 AM
    Make sure sure that the key on both (controller/clearpass) matches

    On your controller check what the ip source radius VLAN and nas-ip address used to send the request and make it matches what you configured on CPPM


  • 7.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 07:51 AM

    Please see the below snapshot

    1.jpg



  • 8.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 07:58 AM
    Did you use the Guest Mac Auth template in CPPM to create both services ?


  • 9.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 08:04 AM

    Yes both services are showing.... 

     

    Untitled22.jpg



  • 10.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 08:10 AM
    Can you share your aaa profile on your controller ?

    I think you are missing the Mac Auth profile define


  • 11.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 08:12 AM

    Please find the attached snapshot

     

     

    aaa.jpg



  • 12.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 08:16 AM

    Please see the snapshot of Guest services profilesaaa.jpg



  • 13.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 08:20 AM
    I noticed is not using the right service is hitting the guess access instead.




  • 14.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 08:22 AM

    i didnt get you from your last message..

     



  • 15.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 08:30 AM
    CPPM is like an ACL it gets evaluated top down and it's hitting another service that you created instead of the last two you need to reorder your service and put the last two on top or disable the guess access one


  • 16.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 08:37 AM

    I did the same.

     

    Now guest mac authentication profile is assinging to the guest but still reject.

     

    11111.jpg111.jpg



  • 17.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 21, 2014 08:51 AM
    That's normal process of the Mac filtering failure .

    When the device connects for the first time and it never been seen you will see a reject and then redirected to the guest portal once the device register the next it authenticates if it's within the accepted time you configured to allow the Mac to be cache for then you will see an accept


  • 18.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 22, 2014 01:16 AM

    Still getting the same error.. 

     

    11.jpg



  • 19.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 22, 2014 01:22 AM
    Are you getting the error when the guest fills out the form or are you talking about when the client first connects?

    Do you have insight enabled under server manager?


  • 20.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 22, 2014 02:54 AM

    I am getting error at the time of authentication. Client get connected to the SSID and when we check on the access tracker it giving error.

     

    Please see the snapshot.

     

    2.jpg

     

    11.jpg



  • 21.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 22, 2014 03:01 AM
    Is insight enabled?

    Is the guest account enabled?


  • 22.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 22, 2014 03:15 AM

    yes the guest account is enabled. but where i can enabled the insight option ?

     

     



  • 23.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 22, 2014 03:18 AM
    Administration » Server Manager » Server Configuration

    Click on the server and there is a check box to enable insight

    Also you can look at this guide. It's for an older version of CPPM but the setup is still the same.

    http://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=10345


  • 24.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 22, 2014 03:20 AM

    still same error. However i have also enabled the insight feature.



  • 25.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 22, 2014 03:23 AM
    Please check the guide and make sure you have all the correct settings. Also upgrade you CPPM to the latest version.


  • 26.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 22, 2014 03:24 AM

    I am using CPPM 6.4 latest.



  • 27.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 22, 2014 03:25 AM
    Your screen shot is showing 6.4.0 the latest is 6.4.1


  • 28.  RE: Guest MAC-Auth Service Guest MAC Authentication not wroking!!!

    Posted Oct 22, 2014 03:45 AM

    now getting this error

     kudo.jpg