Security

I have successfully setup a single click SSID with TOS acceptance using the randomly generated account name.  What I am struggling with is how to set it up so that the mac is cached so that the user doesn't have to click it everytime they connect.  I would prefer to set is so they have re-accept the ToS every 1 or 2 weeks.  I have create the guest authentication with mac cache server using the service template but this doesn't appear to be working for me.  Any help would be greatly appreciated.

Are you using controller Internal CP or ClearPass ?

Clearpass.

You can do this using the Guest Mac Auth template (Mac Caching)

As stated in my original post. I created the guest auth with mac cache service but it is not working.

I missed that part.

A couple of things:

- Do you have radius accounting enabled on the controller and ClearPass ?

- In the mac auth service enforcement policy you should able to define the amount of time you would like to allow the device to authenticate without seeing the captive portal

Ok I am getting further now. When I connect to the SSID I am hitting the correct service but getting this error message:

Session failed for Host=172.18.x.x, Reason=[Failed to connect to datasource: [unixODBC]FATAL: password authentication failed for user "appexternal"
FATAL: no pg_hba.conf entry for host "172.18.x.x", user "appexternal", database "insightdb", SSL off
SQLState=08001 ErrorCode=101]





Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation.

is insight turned on on your clearpass?

Here's a good guide on how to accomplish it

http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/Step-by-Step-Controller-CPPM-6-5-Captive-Portal-authentication/m-p/229740

Thank you. I will give this a try.





Electronic Privacy Notice. This e-mail, and any attachments, contains information that is, or may be, covered by electronic communications privacy laws, and is also confidential and proprietary in nature. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately delete it. Thank you in advance for your cooperation.