Security

Reply
Highlighted
Frequent Contributor I

Re: How to disable machine authentication on a BYOD SSID

Thanks for sharing the link. I have sorted the issue by getting an idea from the link. It appears that it is working now and override server rules if attributes are provided from RADIUS server.

 

Thanks for your help.

Highlighted
Guru Elite

Re: How to disable machine authentication on a BYOD SSID

Only the first rule is processed. It is possible that in the AAA profile the default 802.1x role is authenticated, so unless a VSA or server rule changes it, that is what it will always be.

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Remote Access Point Solution Guide
ArubaOS Consolidated Release Notes
ArubaOS 8 ViA VPN Solution Guide
Highlighted
Guru Elite

Re: How to disable machine authentication on a BYOD SSID

If the 802.1x default role is authenticated, that is what it will always be unless a VSA or server derivation rule changes it. Only a single server derivation rule is applied (first match).

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Remote Access Point Solution Guide
ArubaOS Consolidated Release Notes
ArubaOS 8 ViA VPN Solution Guide
Highlighted
Frequent Contributor I

Re: How to disable machine authentication on a BYOD SSID

It didn't solve the problem. I can still see two IPs from different vlan on the controller. I suspect that there is a bug in code version?

Highlighted
Guru Elite

Re: How to disable machine authentication on a BYOD SSID

Did you turn on user debugging to see why that is happening?

*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Remote Access Point Solution Guide
ArubaOS Consolidated Release Notes
ArubaOS 8 ViA VPN Solution Guide
Highlighted
Frequent Contributor I

Re: How to disable machine authentication on a BYOD SSID

Sorry no. Would you please guide me how to enable user debugging?

--
*Farzan Qureshi* | Network Administrator & Help-desk Support | Rosmini
College | (09) 487 0 530

--
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify the system manager (
admin@rosmini.school.nz). Please note that any views or opinions presented
in this email are solely those of the author and do not necessarily
represent those of the company. Finally, the recipient should check this
email and any attachments for the presence of viruses. Rosmini College
accepts no liability for any damage caused by any virus transmitted by this
email.
Highlighted
Guru Elite

Re: How to disable machine authentication on a BYOD SSID

You would do this:

 

config t
logging level debugging user-debug <mac address of device>

 You would then connect and when you are done, type:

show log user-debug all

 To reset a device's session so that you start from scratch, disconnect the device, then type:

aaa user delete mac <mac address>

 


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.5 User Guide
InstantOS 8.5 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Remote Access Point Solution Guide
ArubaOS Consolidated Release Notes
ArubaOS 8 ViA VPN Solution Guide
Highlighted
Frequent Contributor I

Re: How to disable machine authentication on a BYOD SSID

Thanks for the information. I will try this and will get back to you.

--
*Farzan Qureshi* | Network Administrator & Help-desk Support | Rosmini
College | (09) 487 0 530

--
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify the system manager (
admin@rosmini.school.nz). Please note that any views or opinions presented
in this email are solely those of the author and do not necessarily
represent those of the company. Finally, the recipient should check this
email and any attachments for the presence of viruses. Rosmini College
accepts no liability for any damage caused by any virus transmitted by this
email.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: