I know there has bee a lot of questions on how to return the username instead of the mac address with Clearpass Guest and MAC caching so I thought I would post a quick how to on the policy manager side.
Couple notes:
1. Remember you will still need to set up the controller and captive portal in CPGuest
2. You must have insight enabled.
3. You must have Endpoint Repository as an authorization source.
As of ClearPass 6.x and AOS 6.2, when doing MAC caching, you can return the username tied to the MAC address instead of the MAC address to the controller.
1. You start by creating a Guest Mac auth service with start here or service templates(Pre 6.3).
2. This is what the basic enforcement will look like..
3. Create a new RADIUS Enforcement Profile in CPPM. Set the return attributes below:
Radius:IETF User-Name=%{Endpoint:Username}.
4. In your Enforcement Policy, include the above Enforcement Profile. Make sure to include a check for Endpoint:Username Exists.
ONe other side note is that you can use the same concept to return the username of the person who registered a device with MACTRAC. Here is an example of where I send back the name of the user that registered an apple TV.
Radius:IETF User-Name=%{Endpoint:Sponsor name}.