Security

 View Only
last person joined: 21 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

static host list (wireless IoTs not 802.1x capable) for the guest wifi - is it possible?

This thread has been viewed 5 times

  • 1.  static host list (wireless IoTs not 802.1x capable) for the guest wifi - is it possible?

    Posted 6 days ago

    We have both Clearpass and MobilityMaster and have wireless IoT devices that need to be connected. Can these devices be automatically authenticated thru static host list, by passing the guest portal?

    Please advise



  • 2.  RE: static host list (wireless IoTs not 802.1x capable) for the guest wifi - is it possible?

    EMPLOYEE
    Posted 6 days ago

    Would not recommend using a static host list.  Utilize device registration to get the devices into the [Guest Device Repository] and then use that as the source for bypassing the captive portal.



    ------------------------------
    Carson Hulcher, ACEX#110
    ------------------------------

    Original Message


  • 3.  RE: static host list (wireless IoTs not 802.1x capable) for the guest wifi - is it possible?

    Posted 5 days ago

    Yup this^ Static Hosts List are a legacy feature and should no longer be used. 

    I would also suggest using MPSK with Profiling for this IOT use-case vs static MAC registration: https://www.adamhollifield.com/2022/09/clearpass-mpsk-per-device-type-with.html


    Original Message