Security

last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Device Registration - Auto-fill MAC address?

This thread has been viewed 6 times

  • 1.  Device Registration - Auto-fill MAC address?

    MVP
    Posted Nov 11, 2014 12:35 PM

    In ClearPass guest, we have employees that are allowed to register their personal devices and use the WLAN. We are giving out the Device Registration operator profile when they log in. Is there a way to automatically fill in the mac address of the device they are on? Or is there a way to display it via some type of coding PHP, Javascript, etc.?

     

    If not, how have others accomplished explaining how to obtain their mac address by using that form?



  • 2.  RE: Device Registration - Auto-fill MAC address?

    EMPLOYEE
    Posted Nov 11, 2014 01:01 PM

    Do you have the mac_auth field enabled in your MAC create form?

     

    Also, make sure "MAC Detect" is enabled under Administration > Plugin Manager > MAC Authentication.



  • 3.  RE: Device Registration - Auto-fill MAC address?

    MVP
    Posted Nov 11, 2014 01:15 PM

    Yes I have those enabled. 

     

    We wanted to be able to auto-fill the mac address of the device that is connected and is being registered in the guest device repository.

     

    The user connects to SSID_A and if device does not exist, they are given captive portal role in controller forcing them to go to operator login page. They log in and they have to register their device name and mac address. This all works fine, but we wanted to simplify finding the mac address of the device, either by running some type of script or something that would either auto-fill it in that field or display it as part of the form.



  • 4.  RE: Device Registration - Auto-fill MAC address?

    EMPLOYEE
    Posted Nov 11, 2014 02:16 PM

    Is the MAC address present in the MAC create URL redirect?



  • 5.  RE: Device Registration - Auto-fill MAC address?

    EMPLOYEE
    Posted Nov 11, 2014 02:30 PM

    Just did a quick test and it's working without issue:

     

    mac-create-mac.png



  • 6.  RE: Device Registration - Auto-fill MAC address?

    MVP
    Posted Nov 11, 2014 02:59 PM

    How did you get it to automatically fill in? If the MAC address wasn't in the redirect URL, how would I get it there?



  • 7.  RE: Device Registration - Auto-fill MAC address?

    EMPLOYEE
    Posted Nov 11, 2014 02:59 PM

    It is part of the captive portal redirect URL from any Aruba device. What device are you authenticating from?



  • 8.  RE: Device Registration - Auto-fill MAC address?

    MVP
    Posted Nov 11, 2014 03:01 PM

    It would be a Windows/MAC laptop or mobile device, using Aruba controller and ClearPass.



  • 9.  RE: Device Registration - Auto-fill MAC address?

    EMPLOYEE
    Posted Nov 11, 2014 03:01 PM

    How is the user getting to the registration page? Manually or captive portal redirect?



  • 10.  RE: Device Registration - Auto-fill MAC address?

    MVP
    Posted Nov 11, 2014 03:03 PM

    captive portal redirect if the device they are on is not registered. Manually if it's a gaming console or some other device they want to register. The captive portal redirect is the important one to auto-fill.



  • 11.  RE: Device Registration - Auto-fill MAC address?

    EMPLOYEE
    Posted Nov 11, 2014 03:05 PM

    Hm. The MAC address is always passed in a captive redirect from an Aruba device. You may have to open a TAC case to find out why that is not happening.



  • 12.  RE: Device Registration - Auto-fill MAC address?

    MVP
    Posted Nov 11, 2014 03:07 PM

    I will test more and see if I can get it to work before opening a TAC case, this is more of a convenience if we could get it working, but not a requirement.

     

    Thanks for all the help.