How To Set MAC Caching/Authentication Expiry Date To End Of Current Month?

MVP Expert
MVP Expert
Requirement:

 

Cache mac address of users from any day of current month till end of current month.

 



Solution:

 

  • For ClearPass MAC caching flow, by default mac caching expiry values will be stored in Endpoint field: MAC-Auth Expiry which is a date-time type field.
  • In order to set MAC-Auth Expiry value to end of current month, we need to utilize following SQL query:

select (date_trunc('month', localtimestamp(0)) + interval '1 month - 1 day'+ interval '1 days') as eom;

  • For example, if current date of the server is 17-Apr-2019  12:22:00 then using above query, we will get output datetime = 01-May-2019 00:00:00

 

Note: Endpoint field MAC-Auth Expiry has data type of "date-time". Hence, we need to make sure that if we are storing any data in this particular field, it should be in date-time format like mentioned above.

 



Configuration:

 

  • We will be adding this custom query in [Time Source] source as a new filter
  • Navigate to Policy manager>Configuration>Authentication>Sources>Click in [Time Source]>Attributes>Add more filters

  • In order to use this filter, we could create entity update enforcement profile
  • Go to Policy manager>Configuration>Enforcement>Profiles>Add Profile>Template:ClearPass Entity Update Enforcement

  • Now we could use this newly created profile in our existing service to store MAC-Auth Expiry values in endpoint post successful captive portal authentication by users.
  • Or we could edit existing profile that is responsible for storing MAC-Auth Expiry values and replace the value as mentioned above in screenshot.

 

Note: We are fetching this values from Time Source during Authorization phase. It is mandatory to have [Time Source] as authorization source in MAC caching service (service which will be used to categorize captive portal logins from users).

 

 



Verification

 

  • Access tracker snippets:

 

Version history
Revision #:
2 of 2
Last update:
‎05-12-2019 10:38 AM
Updated by:
 
Labels (1)
Contributors
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: