Security

Reply
Occasional Contributor II

Aruba Controller - Mac authentication for Guest Wi-Fi

Dear all,

We have Aruba 3600 controller with 6.3.1.6 OS and several AP105 access points. When users choose Guest SSID, they will be prompted with the Captive Portal to enter username & password. I would like few computers (MAC Address) to by pass this authentication.

 

Under Security > Authentication > User Rules I have added a rules with the MAC Address of the computer that needs to be bypassed.

aruba-06jan16-01.png

Under Security > Authentication > Profiles >> Guest Wi-Fi profile I have selected the above rule for the User derivation rules dropdown.

aruba-06jan16-02.png

The particular device still pops to enter username and the password, Have I missed anything ?

Any help would be much appreciated, thank you.

 

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

In your UDR you need to change the role to something else that is not the x-logon user-role, use the authenticated or create a new one 

Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Guru Elite

Re: Aruba Controller - Mac authentication for Guest Wi-Fi


bickyz wrote:

Dear all,

We have Aruba 3600 controller with 6.3.1.6 OS and several AP105 access points. When users choose Guest SSID, they will be prompted with the Captive Portal to enter username & password. I would like few computers (MAC Address) to by pass this authentication.

 

Under Security > Authentication > User Rules I have added a rules with the MAC Address of the computer that needs to be bypassed.

aruba-06jan16-01.png

Under Security > Authentication > Profiles >> Guest Wi-Fi profile I have selected the above rule for the User derivation rules dropdown.

aruba-06jan16-02.png

The particular device still pops to enter username and the password, Have I missed anything ?

Any help would be much appreciated, thank you.

 


Make sure you delete the user from the user table to trigger the rule:

 

aaa user delete mac <mac address of user>


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Guru Elite

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

You gave the device the logon role in your UDR. That needs to be your final access role.

Sent from Nine

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Occasional Contributor II

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

Thank you everyone, I have changed the UDR role value to "authenticated". Now the particular device (MAC address) is auto authenticated. Devices without the MAC addresses on the rules will be prompted with the Captive Portal and has to enter valid username/password.

aruba-06jan16-03.png

 

Is there any way to import the bulk list of MAC addresses ?

 

thank you very much.

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

Here you go:
http://community.arubanetworks.com/t5/Wireless-Access/importing-CSV-file-to-internal-DB/m-p/78152/highlight/true#M2488
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Occasional Contributor II

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

Hi, I want to import the list of MAC Addresses, not a user account. And on the Security > Authentication > User Rules I cannot find an option to import.

 

thank you

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

That's not possible
Thank you

Victor Fabian
Lead Mobility Architect @WEI
AMFX | ACMX | ACDX | ACCX | CWAP | CWDP | CWNA
Guru Elite

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

Build an excel sheet that concats the commands and paste into controller.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Occasional Contributor II

Re: Aruba Controller - Mac authentication for Guest Wi-Fi

Hi,

What is the command to add the mac address and assign "authenticated" role

 

thank you.

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: