Security

Reply
Highlighted
Occasional Contributor I

Aruba-Named-User-VLAN case sensitivity

We are using ClearPass Guest to for users with pre-defined operator logins to go and register their IOT devices for MACAUTH to the wireless network. The device then can perform a MAC AUTH to the network and as part of the RADIUS authentication, we then return %{Authorization:[Guest Device Repository]:SponsorName} using the Aruba-Named-User-VLAN VSA.  This puts the device on a specific VLAN for the apartment that registered the device.

 

Our problem is that it appears that the Aruba controller (AOS 8.5) is case-sensitive for the names of the named vlans.  Everything works great as long as the user logs into with uppercase letters, but when the guest user logs in with some other combination then the device ultimately lands on the default VLAN assignment due to the case sensitivity issue.

 

The usernames they log into are in the format of CHD-101 (sitename-apartment#). 

 

Any idea on how I can convert sponsor_name to uppercase during the device registration and/or convert it during the enforcement profile in CPPM?

 

I've tried modifying the fields in Guest to use the NwaStrToUpper with no success and am running out of ideas.

 

Thanks!

 

 

 

Occasional Contributor I

Re: Aruba-Named-User-VLAN case sensitivity

Nevermind.  I figured it out by updating the SQL query used in the authentication source to return the sponsor_name alias in upper case.

 

Thanks!

 

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: