Security

I need to configure guest mac authentication. For this  i have setup the guest mac authentication wizard , this wizard gives me two services

 

1. Guest MAC-Auth Service Guest MAC Authentication
2. Guest MAC-Auth Service Guest Access With MAC Caching

I am not triggring the guest mac-authentication service. howerver i have configured the controller/SSID during the clearpass guest mac authentication wizard.

 

 

In the controller Config make sure you add ClearPass as your authentication server for Mac auth and you also need to add a Mac Auth profile

This is under your guest aaa profile

Already added the clearpass in the server group and also for the authentication server group. Also added the mac-authentication profile in the aaa profile.

 

Still getting errror. guest person is not authenticated.

Quick question , are you seeing this on the initial guest Mac Auth ?

I want to configure guest mac authentication. When my guest get connected to the SSID it doesnt shows any output on the access tracker.

 

Make sure sure that the key on both (controller/clearpass) matches

On your controller check what the ip source radius VLAN and nas-ip address used to send the request and make it matches what you configured on CPPM

Please see the below snapshot

Did you use the Guest Mac Auth template in CPPM to create both services ?

Yes both services are showing.... 

 

Can you share your aaa profile on your controller ?

I think you are missing the Mac Auth profile define

Please find the attached snapshot

 

 

Please see the snapshot of Guest services profiles

I noticed is not using the right service is hitting the guess access instead.

i didnt get you from your last message..

 

CPPM is like an ACL it gets evaluated top down and it's hitting another service that you created instead of the last two you need to reorder your service and put the last two on top or disable the guess access one

I did the same.

 

Now guest mac authentication profile is assinging to the guest but still reject.

 

That's normal process of the Mac filtering failure .

When the device connects for the first time and it never been seen you will see a reject and then redirected to the guest portal once the device register the next it authenticates if it's within the accepted time you configured to allow the Mac to be cache for then you will see an accept

Still getting the same error.. 

 

Are you getting the error when the guest fills out the form or are you talking about when the client first connects?

Do you have insight enabled under server manager?

I am getting error at the time of authentication. Client get connected to the SSID and when we check on the access tracker it giving error.

 

Please see the snapshot.

 

 

Is insight enabled?

Is the guest account enabled?

yes the guest account is enabled. but where i can enabled the insight option ?

 

 

Administration » Server Manager » Server Configuration

Click on the server and there is a check box to enable insight

Also you can look at this guide. It's for an older version of CPPM but the setup is still the same.

http://support.arubanetworks.com/Documentation/tabid/77/DMXModule/512/Command/Core_Download/Default.aspx?EntryId=10345

still same error. However i have also enabled the insight feature.

Please check the guide and make sure you have all the correct settings. Also upgrade you CPPM to the latest version.

I am using CPPM 6.4 latest.

Your screen shot is showing 6.4.0 the latest is 6.4.1

now getting this error