Wireless Access

 View Only
last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

Aruba Central and Clearpass - Cisco Anyconnect Always on

This thread has been viewed 3 times
  • 1.  Aruba Central and Clearpass - Cisco Anyconnect Always on

    Posted 2 days ago

    Hi,

    I have a new build with an Aruba Central deployment using Clearpass as the Web Portal page to accept Terms and Conditions before being granted internet access. After first login with acceptance of terms, MAC Address authentication applies with no problem. This works without issue.

    I have some Cisco Anyconnect users who have an issue though. It seems that when they attempt to connect to the network they cannot connect - Clearpass has the mac address whitelisted as part of the logon and as an approved device. I think the laptops of concern are attempting to connect straight out to terminate their VPN without allowing the connection to the wifi to complete - unless they set captive portal remediation which apparently they don't have the capability to this.

    Is there anything that can be done that would allow these specific MAC addresses out without the clearpass level - a new hidden SSID locked to MACs on Aruba Central rather than Clearpass that has a completely open connection but provides DHCP?

    Regards

    Adrian

    Is there any way I can allow devices 



  • 2.  RE: Aruba Central and Clearpass - Cisco Anyconnect Always on

    MVP GURU
    Posted 20 hours ago

    So they are not able to open a browser and try accessing an external site? This should redirect if you are assigning a captive portal. Is DNS allowed for the client prior to the terms acceptance?



    ------------------------------
    Dustin Burns

    Lead Mobility Engineer @Worldcom Exchange, Inc.

    ACCX 1271| ACMX 509| ACSP | ACDA | MVP Guru 2022-2023
    If my post was useful accept solution and/or give kudos
    ------------------------------