Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

ClearPass recepcionist access from Guest User Repository

This thread has been viewed 4 times
  • 1.  ClearPass recepcionist access from Guest User Repository

    Posted Jun 07, 2016 11:30 AM

    Hi Airheads Experts!

     

    I would like to ask you about ClearPass recepcionist access.

    We need to configure a guest administrator who is in the Guest User repository. Is it possible?

     

    I am stuck in this case.

     

    Thank you in advance for your reply!

    Best regards,

    Zs

     

     



  • 2.  RE: ClearPass recepcionist access from Guest User Repository

    EMPLOYEE
    Posted Jun 07, 2016 11:57 AM
    Yes, you would just add the Guest User Repository as an authentication
    source for your Guest Login service and then map the appropriate role.


  • 3.  RE: ClearPass recepcionist access from Guest User Repository

    Posted Jun 07, 2016 05:44 PM

    Hi,

     

    Good to hear, but it didn't work for me.

    I created a new service for application. Application value guest. I added guest user db for authentication source. But I don't know what about to the roles and enforcement. I did several ways and access tracker show me to accept but I can't login with the guestadmin user who is in the guest user db.

    Could you write me an example setup about roles and enforcement?

     

    Thank you!

    Zs



  • 4.  RE: ClearPass recepcionist access from Guest User Repository
    Best Answer

    EMPLOYEE
    Posted Jun 07, 2016 05:48 PM

    Create an application enforcement profile that returns "Receptionist" for attribute admin_privileges and then use that enforcement profile in your enforcement policy.

     

    application-enf-receptionist.PNG



  • 5.  RE: ClearPass recepcionist access from Guest User Repository

    Posted Jun 07, 2016 06:53 PM

    Thank you for your quick answer, it worked!

     

    Br.,

    Zs