Aruba Controller - Mac authentication for Guest Wi-Fi

[bickyz]

Dear all,

We have Aruba 3600 controller with 6.3.1.6 OS and several AP105 access points. When users choose Guest SSID, they will be prompted with the Captive Portal to enter username & password. I would like few computers (MAC Address) to by pass this authentication.

Under Security > Authentication > User Rules I have added a rules with the MAC Address of the computer that needs to be bypassed.

Under Security > Authentication > Profiles >> Guest Wi-Fi profile I have selected the above rule for the User derivation rules dropdown.

The particular device still pops to enter username and the password, Have I missed anything ?

Any help would be much appreciated, thank you.

[cappalli · Accepted solution]

aaa derivation-rules user [udr name] set role condition macaddr equals [MAC address] set-value [role name]

Sent from Nine

[Victor Fabian]

In your UDR you need to change the role to something else that is not the x-logon user-role, use the authenticated or create a new one 

[cjoseph]

---

@bickyz wrote:

Dear all,

We have Aruba 3600 controller with 6.3.1.6 OS and several AP105 access points. When users choose Guest SSID, they will be prompted with the Captive Portal to enter username & password. I would like few computers (MAC Address) to by pass this authentication.

Under Security > Authentication > User Rules I have added a rules with the MAC Address of the computer that needs to be bypassed.

Under Security > Authentication > Profiles >> Guest Wi-Fi profile I have selected the above rule for the User derivation rules dropdown.

The particular device still pops to enter username and the password, Have I missed anything ?

Any help would be much appreciated, thank you.

---

Make sure you delete the user from the user table to trigger the rule:

aaa user delete mac <mac address of user>

[cappalli]

You gave the device the logon role in your UDR. That needs to be your final access role.

Sent from Nine

[bickyz]

Thank you everyone, I have changed the UDR role value to "authenticated". Now the particular device (MAC address) is auto authenticated. Devices without the MAC addresses on the rules will be prompted with the Captive Portal and has to enter valid username/password.

Is there any way to import the bulk list of MAC addresses ?

thank you very much.

[Victor Fabian]

Here you go:
http://community.arubanetworks.com/t5/Wireless-Access/importing-CSV-file-to-internal-DB/m-p/78152/highlight/true#M2488

[bickyz]

Hi, I want to import the list of MAC Addresses, not a user account. And on the Security > Authentication > User Rules I cannot find an option to import.

thank you

[Victor Fabian]

That's not possible

[cappalli]

Build an excel sheet that concats the commands and paste into controller.

[bickyz]

Hi,

What is the command to add the mac address and assign "authenticated" role

thank you.