Security

Reply
Frequent Contributor II

MAC + PSK user roles and blacklisting

Hi,

 

I have created a VAP profile having 2 authentication methods, MAC and PSK .

Created MAC authenticated role as Guest.

and for PSK it is authenticated.

But the clients are getting role based on MAC auth only (ie. guest )...as shown on controller > monitoring.

 

also I want to set client  blacklisting after 2 failed auths...

this is working for Guest (if captive portal auth fails)...but for MAC + PSK auth SSID, if  MAC auth fails client goes to Blacklist.

but its not happening when MAC auth is done and PSK fails.

 

Thanks

Guru Elite

Re: MAC + PSK user roles and blacklisting

 


newbie wrote:

Hi,

 

I have created a VAP profile having 2 authentication methods, MAC and PSK .

Created MAC authenticated role as Guest.

and for PSK it is authenticated.

But the clients are getting role based on MAC auth only (ie. guest )...as shown on controller > monitoring.

 

also I want to set client  blacklisting after 2 failed auths...

this is working for Guest (if captive portal auth fails)...but for MAC + PSK auth SSID, if  MAC auth fails client goes to Blacklist.

but its not happening when MAC auth is done and PSK fails.

 

Thanks




With mac+psk, the mac authentication role takes precedence.

 

Blacklisting only takes place for mac authentication, not for failed PSK.

 


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: