Security

Reply
Occasional Contributor I

Re: Setting up MPSK for headless/IoT devices

Well, that was easy. Thank You Cappalli

New Contributor

Re: Setting up MPSK for headless/IoT devices

Take a look at this link. https://community.arubanetworks.com/t5/Security/ClearPass-MPSK-Form-Options/m-p/526335#M42588

I recommend importing , even if its just 1 device , you have more options. See the import template we put together
New Contributor

Re: Setting up MPSK for headless/IoT devices

In the Cisco world, you can limit the SSID to a specific location using "ap-groups", not sure how that is done in Aruba. Secondly, you can put a rule in the service where connection requests from a specific controller(s) are accepted.

Re: Setting up MPSK for headless/IoT devices

We do it in a similar way Tariq. I will call you to discuss further.

MVP Expert

Re: Setting up MPSK for headless/IoT devices

Setting this up in the Lab today with all of my Home IoT devices :-)

Sean Rynearson
Smart Spaces TME
Phone: 706.972.1520
Twitter: @srynearson
Airheads: @srynearson
Highlighted
MVP Expert

Re: Setting up MPSK for headless/IoT devices

How can I mass import? lol Got it

Sean Rynearson
Smart Spaces TME
Phone: 706.972.1520
Twitter: @srynearson
Airheads: @srynearson
New Contributor

Re: Setting up MPSK for headless/IoT devices

Cool you got it , if you have any question I can try to help.

 

Not sure if its a smart thing to do , but I am using this instead of 802.11x . For Macs 802.11x auth sucks, (BT and WiFi are on the same chip and it has caused many problems) I didnt want my users to suffer. MPSK is much easier for me, Everyone has their own password, and they can't share it , well they could it just wouldnt work on other device. One thing to be aware of, if a user is using iCloud Keychain, WiFi passwords are shared throughout all their devices. To solve this just usethe same MPSK Password , for all devices for that particular user. I for instance I used same MPSK password when registering, my apple watch,homepod,macbook,imac,appletv,ipad,iphone etc .... so just becareful.

Guru Elite

Re: Setting up MPSK for headless/IoT devices

Please be aware that this was only designed for headless devices. Alternative workflows may not be officially supported.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
MVP
MVP

Re: Setting up MPSK for headless/IoT devices

Hi,

 

My SMTP server working fine but have some issues with autofill the email field in the mac_create form.

 

I send the attribute "mail" in my enforcement profile. I can see my emailadres send correctly in the request output as attribute "Application:mail".

 

In the guest application there is a translation rule to bind the attribute value "mail" on the operator field "email".

 

In the Form field the email attribute is not autofilled.

 

I make some mistake or misunderstanding somewhere, but after some hours i give up, grrr. Some help should be welcome :). See attachments Screen Shot 2019-09-27 at 15.35.23.pngScreen Shot 2019-09-27 at 15.36.36.pngScreen Shot 2019-09-27 at 15.36.00.png

 

 

Kind Regards Marcel Koedijk
HPE ASE Flexnetwork | ACMP | ACCP | Ekahau ECSE Design - Was this post usefull, Kudos are welcome.
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: