Security

Hi forum,

 

My onboarded devices are not automatically joining the EAP-TLS ssid. I have an open ssid that will get you to the provisioning page and after you're done you should automatically connect to the secure EAP-TLS ssid. I have my network configured like this:

 

But still no luck. I have to click on the EAP-TLS ssid after I onboard in order to join it. any idea? 

What version of ClearPass are you running?

 

Also, does change status from Access Tracker work?

clearpass is 6.5

and change status isn't working. I'm looking to automate the disconnect from the open ssid and the reconnect to the eap-tls ssid.

You should check to see that RFC3576 (CoA) is enabled and working.  Check the controller and also the Network Device in ClearPass.

thanks Seth, how do I test CoA working or not? I know on my aaa profile I have ccpm there with the same psk.

In access tracker, click the most recent request for a currently connected client and click the Change Status button at the bottom and then choose [Aruba Terminate Session].



Sent from Mail for Windows 10

Mac devices will not switch ssid. They like to hold onto the original one. You will need to make sure you are on boarding in the same ssid and then send a coa disconnect