Security

 View Only
last person joined: 9 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

[ClearPass] Guest : set operator last/first name when create Device

This thread has been viewed 14 times
  • 1.  [ClearPass] Guest : set operator last/first name when create Device

    Posted Aug 30, 2024 05:02 AM

    Hello team,

    I am trying to make a configuration in ClearPass Guest to save the First and Last Name of the connected operator when creating a Device in Devices > Create Device.

    The goal is to have this information for each device registered in the Guest Device Repository DB.

    I would like the first_name and last_name fields to be automatically filled with the operator information (first_name, last_name).

    Is there a simple way or do I have to use Javascript?

    Thanks!



    ------------------------------
    CyberSec & Network Engineer - ACCX #1532 - ACMP - ACP CA
    ------------------------------


  • 2.  RE: [ClearPass] Guest : set operator last/first name when create Device

    Posted Aug 30, 2024 05:23 AM

    Hi

    Do you have Active Directory as authentication source for the guest operators?

    By default ClearPass doesn't read the first and last name from AD, but you can add them as attributes.

    Next step may be possible to populate by setting the initial value to {%Authorization:AD Source:givenName} and {%Authorization:AD Source:sn}

    Another way can be to have a link to the page and add the values in the URL as parameters first_name={%Authorization:AD Source:givenName},last_name={%Authorization:AD Source:sn}

    I have not tested this myself.



    ------------------------------
    Best Regards
    Jonas Hammarbäck
    MVP Guru 2024, ACEX, ACDX #1600, ACCX #1335, ACX-Network Security, Aruba SME, ACMP, ACSA
    Aranya AB
    If you find my answer useful, consider giving kudos and/or mark as solution
    ------------------------------



  • 3.  RE: [ClearPass] Guest : set operator last/first name when create Device

    Posted Aug 30, 2024 05:32 AM

    Hi Jonas,

    Thanks for your help.

    No, the Operators come from the Guest User Repository.

    The client wants the end user to register his @MAC for MPSK himself.
    We didn't find any other solution than to use Operator Profile feature.

    So the source of the operator is the guest user database.

    Everything works fine but I can't save the information in the device entry



    ------------------------------
    CyberSec & Network Engineer - ACCX #1532 - ACMP
    ------------------------------



  • 4.  RE: [ClearPass] Guest : set operator last/first name when create Device

    Posted 27 days ago

    Confirm that the carrier profile is correctly configured to accept MAC address information. This may involve verifying the settings in your guest user database and in the carrier profile.