Security

last person joined: an hour ago 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Back to discussions
Expand all | Collapse all

Guest Account Expiration

This thread has been viewed 7 times

  • 1.  Guest Account Expiration

    Posted Jul 18, 2012 04:43 AM

    Hi All,

     

    Quick question for you.

     

    Scenario:

    Guest SSID with controller captive portal 

    Internal database on controller is being used 

     

    If a guest account is created with a specific expiration date/time will the guest client be disconnected from the network?

     

    I believe the answer is "No, this is a feature of RFC 3576". So with this in mind how can I kick users off?

    I'm thinking about using the "    Re-authentication Interval" in the Guest network "802.1X Authentication Default Role" but this wont be anywhere near an idea solution.

     

    I'm trying to steer the customer towards clearpass guest but this is currently not an option.

     

    Thoughts?

     

    Thanks

    James

     



  • 2.  RE: Guest Account Expiration
    Best Answer

    EMPLOYEE
    Posted Jul 18, 2012 10:02 AM

    The guest WILL be disconnected when you setup with an internal expiry.

     

    RFC 3576 is for when you use an external device to manage guest accounts like ClearPass Guest.