Security

last person joined: 12 hours ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

CPPM front end to add mac addresses to static host list

This thread has been viewed 0 times

  • 1.  CPPM front end to add mac addresses to static host list

    Posted Jul 21, 2015 09:41 AM

    Hi,

    A while back I set up a WPA2-PSK network for our comp sciece dept for a batch of raspberry pi's. As thre were only about 17 of them I set up a static mac address list on CPPM to be used for mac-auth and then checked that the dhcp signature said it was a raspberry pi. Only devices that had the shared key, whose mac address we knew about  and whose signature said they were raspberry Pis could conect to the network. A RADIUS filter-id attribute passed a string back to the mobility controller to apply a policy to the authenticated session.

     

    I now want to roll out a version of this to our study bedrooms for all the dumb games consoles , TVs plu-ray players  and whatever else is out there that only supports WPA2-PSK. The problem is getting the device mac address into a clearpass list.

     

    1). I could just say if ( <favourite games console> ) then Access-Accept with this enforcement policy, but  that wouldn't leave us with any accountability.

    2). I could write a standalone web page that the user logs into and registers a mac address in an external db ... and set up an auth source that checks calling stationid against external db which I then use in the CPPM service

    3). Is there  any way of restricting CPPM access for a user to a page that allows you to insert a mac address into a static list?

    4). external web page using REST API to get at CPPM?

     

    Any suggestions?

    A

     



  • 2.  RE: CPPM front end to add mac addresses to static host list
    Best Answer

    EMPLOYEE
    Posted Jul 21, 2015 09:43 AM

    There is a full, end-user device registration system built in for exactly this purpose.

     

    Screenshot (15).png



  • 3.  RE: CPPM front end to add mac addresses to static host list

    Posted Jul 21, 2015 11:43 AM
    Ah! That's in a bit I haven't looked at yet :-))
    Perhaps a bit more reading required :-))