Security

 View Only
  • 1.  guest devices variables

    Posted Mar 02, 2023 07:13 AM

    Hi,

    what would be the guest device repository variable call? Like %{GuestUser:do_expire} for Guest Users? I tried %{GuestDevice:  and %{GuestDevices but both do not pick up the do_expire variable form the guest device pass.

    thanks for letting me know

    Erik



    ------------------------------
    Erik Eckhardt
    ACMX #1245, ACDX #968, ACCP, ACSP
    ------------------------------


  • 2.  RE: guest devices variables

    Posted Mar 02, 2023 03:28 PM

    i thik it should be in this format



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 3.  RE: guest devices variables

    Posted Mar 03, 2023 01:54 AM

    Hi Ariya,

    Thanks for your input. I'm not looking for the attribute but for the attribute value as a variable from the guest device repository. 

    so Authorization[Guest Device Repository]:expire_action EQUALS %{whatimlookingfor:do_expire} similar as Aurthorization[Guest User Repository] expire_action EQUALS %{GuestUser:do_expire}

    I'm not using the guest user repository nor do I want to. Use case is mac authentication on a WPA2 Personal encrypted wireless network allowing specific devices with the option to import multiple devices using a CSV. I'd like to use the do_expire field to do specified actions on a guest device record.

    thanks,

    Erik



    ------------------------------
    Erik Eckhardt
    ACMX #1245, ACDX #968, ACCP, ACSP
    ------------------------------



  • 4.  RE: guest devices variables

    Posted Mar 03, 2023 04:48 PM

    I understand your question now. Using the API explorer I think it is "Device" but I don't see do_expire attribute like I see under GuestUser

    Here are the attributes that are available.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------



  • 5.  RE: guest devices variables

    Posted Mar 08, 2023 03:32 AM

    Thanks Ariya,

    didn't think of using the API explorer to find all calls.

    Meanwhile I found out that you actually have to use GuestUser:do_expire to pick up the do_expire variable from the GuestDevice record. I don't know why it didn't get the first time. I tested it again, this time using the enforcement profile created by the Guest Authentication with MAC Caching Template and the actual action number is now showing in the output.

    rgds, Erik



    ------------------------------
    Erik Eckhardt
    ACMX #1245, ACDX #968, ACCP, ACSP
    ------------------------------



  • 6.  RE: guest devices variables

    Posted Mar 08, 2023 05:27 PM

    good on you.



    ------------------------------
    If my post was useful accept solution and/or give kudos.
    Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
    ------------------------------