Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

Defining unique visitor name in cppm guest

This thread has been viewed 1 times
  • 1.  Defining unique visitor name in cppm guest

    Posted Sep 06, 2018 07:10 AM

    In Clearpass guest/Configuratino/Forms/mac_create there is a field called Visitor name

     

    1). If I want to have the visitor name= mac address entered in the mac address field automatially, how do I do this so that the user only enters the mac-address

     

    2). If I wanted the visitor nam = <userid of logged in user>-<mac address entered in mac address field> . can you do this autpomatically?

     



  • 2.  RE: Defining unique visitor name in cppm guest

    Posted Sep 06, 2018 11:02 AM
    Possibly possible. :)

    Can I ask why do you want to do this?


  • 3.  RE: Defining unique visitor name in cppm guest

    Posted Sep 07, 2018 04:29 AM

    First I have to say its not my idea ... as to why if I started saying why it would probably end up being a bit of a rant. Suffice to say other people think its a good idea :-(



  • 4.  RE: Defining unique visitor name in cppm guest

    Posted Sep 07, 2018 04:38 AM
    Ah ok. I've had a look at doing this and it seems mostly possible with javascript but it looks like a bit of a hack so I wouldn't really recommend it.

    There's may be another way to do this but I'm not aware of it.

    I assume you know that the current logged in user is the sponsor for any device s that they add. You can add the sponsor field to the device list view (/guest/mac_list.php) so you can see who the devices belong to.

    Also you could just remove the device name so they don't have the extra field to fill in however it's handy to have the name as most people can't differentiate their PS4 and their Sonos via mac address. ;)


  • 5.  RE: Defining unique visitor name in cppm guest

    Posted Sep 07, 2018 04:54 AM

    >Ah ok. I've had a look at doing this and it seems mostly possible with >javascript but it looks like a bit of a hack so I wouldn't really recommend it.

    >There's may be another way to do this but I'm not aware of it.
    ok.
    >I assume you know that the current logged in user is the sponsor for any >device s that they add. You can add the sponsor field to the device list >view (/guest/mac_list.php) so you can see who the devices belong to.
    Yup know that ...


    >Also you could just remove the device name so they don't have the extra >field to fill in however it's handy to have the name as most people can't >differentiate their PS4 and their Sonos via mac address. ;)

    Yup, my version of the page says enter device name of the form userid-<devicetype>, and yes mac addressses are'nt that useful for end users



  • 6.  RE: Defining unique visitor name in cppm guest

    Posted Sep 07, 2018 11:20 AM

    I'll not go into the office politics too much but the thinking behind this was to standardise on a device name in the format of userid-mac or userid-devicetype for all registered devices with the possibility of using this field as an attribute to do things in the future.  We decided that userid-mac would be good as it would be unique to every device. 

     

    As we know most people won't read the fine detail of the webpage it's most likely we'll just get free text entered (unless we do some sort of validation check). If we do the validation check, users will get frustrated trying to enter the right format and end up calling the support office for help which defeats the purpose of self registration.

     

    The idea is to keep the registration process as simple as possible for the end user (the current solution is to enter mac address and device type), so my feeling is either to remove it or let the user enter free text and accept that we can't use the field as an attribute to decide what we do with a device.



  • 7.  RE: Defining unique visitor name in cppm guest

    EMPLOYEE
    Posted Sep 11, 2018 07:29 AM

    @alexsuoy wrote:

    In Clearpass guest/Configuratino/Forms/mac_create there is a field called Visitor name

     

    1). If I want to have the visitor name= mac address entered in the mac address field automatially, how do I do this so that the user only enters the mac-address

     

    2). If I wanted the visitor nam = <userid of logged in user>-<mac address entered in mac address field> . can you do this autpomatically?

     


    Both are possible. You can use one of the following Java Scripts.

     

    1. Populate mac address to visitor name field.

     

    <script type="text/JavaScript"><!--{literal}
    function RegisterSubmit(mac_create) {
    var frm = document.forms[mac_create];

     

    if (frm.mac.value != '') {
    var temp1= frm.mac.value;
    frm.visitor_name.value=temp1;
    }
    return true; // Proceed to regular
    }
    {/literal}</script>

     

    2. Populate logged in user + mac address to visitor_name

     

    <script type="text/JavaScript"><!--{literal}
    function RegisterSubmit(mac_create) {
    var frm = document.forms[mac_create];

    if (frm.sponsor_name.value != '') {
    var temp1= frm.sponsor_name.value;
    var temp2= frm.mac.value;
    frm.visitor_name.value=temp1 + " - " + temp2;
    }
    return true; // Proceed to regular
    }
    {/literal}</script>

     

    Notes:

    • You may need to replace the "mac_create"  in the above script with the correct form name, if you are not using the default mac_create form for device resgistration.
    • Paste the above script in the form footer, Form > Edit > Footer HTML.
    • Edit the Form fields > submit > Show Advanced Porperties > AJAZ Submit and enter "RegisterSubmit". 

    You can modify the fields in the script as needed. Keep the sponsor_name and visitor_name field interface type to hidden when using the script #2, sponsor_name filed interface can be static text too.

     

    You may also refer the below article, if you have any assisatnce on how to use the script.

    http://community.arubanetworks.com/t5/AAA-NAC-Guest-Access-BYOD/How-to-restrict-email-sponsor-email-field-in-guest-self/ta-p/215039