Security

last person joined: 4 hours ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

'Too many devices' message to guest users

Jump to Best Answer
  • 1.  'Too many devices' message to guest users

    Posted Feb 11, 2020 10:28 AM

    Hi,

     

    on different implementations of [sponsored] guest access (with MAC Caching) we face the issue that a guest user does not get a message that he tries to login with the 3rd device although he just may use 2 devices (unique-device-count) in total with his guest account.

    He is just redirected to the login page without any hint.

    Did we miss something or is there no possibility to notify the guest?

     

    Thanks,

    Uli



  • 2.  RE: 'Too many devices' message to guest users

    Posted Feb 17, 2020 09:35 PM

    If your goal is to notify a guest user that he has exceeded his limit, starting in ArubaOS 6.5.0.0 you can customize the "Reply-Message" radius attribute which will send a message to users upon rejection or successful authentication:  http://www.arubanetworks.com/techdocs/ArubaOS/6.5.x.x/Default.htm#ReleaseNotes/FeaturesIn6.5.xReleases/Features6.5.x.htm?Highlight=Reply-Message.



  • 3.  RE: 'Too many devices' message to guest users

    Posted Feb 17, 2020 09:41 PM

    Specifically you can set the attribute like this:

    Radius:IETF:Reply-Message'You have exceeded the number of devices allowed'

     



  • 4.  RE: 'Too many devices' message to guest users

    Posted Feb 18, 2020 08:26 AM

    Hi Dustin,

     

    thank you, that sounds promising. Where will the output of the Radius message be shown?

     

    Regards,

    Uli

     

     



  • 5.  RE: 'Too many devices' message to guest users
    Best Answer

    Posted Feb 18, 2020 09:10 AM

    It should show right above the login fields on the guest login page in red text.

    1.jpg



  • 6.  RE: 'Too many devices' message to guest users

    Posted Feb 18, 2020 09:13 AM

    That's exactly what I am looking for!

     

    Thank you very much!



  • 7.  RE: 'Too many devices' message to guest users

    Posted Feb 18, 2020 09:10 AM

    What is the enforcement policy you have set in Guest mac caching service?

     

    If you want to restrict number of unique device for single Guest user then you can set this condition, it will prevent user to login though he try login.

     

    (Authorization:[Endpoints Repository]:Unique-Device-Count  GREATER_THAN  3)[Deny Access Profile]