Security

Upcoming community maintenance Oct. 27th through Oct. 29th
For more info click here
Reply
Highlighted
Regular Contributor II

Single SSID OnBoarding authentication

Hi Forum,

 

Can I have it configured where when a user provide EAP-PEAP credentials on thier smart device I redirecte them to the onboard page but not ask them to web authenticate again on the portal?

Highlighted
Moderator

Re: Single SSID OnBoarding authentication

When using an Aruba controller, yes, you can use Aruba ASO.

In most cases, dual SSID onboarding is recommended for security reasons.


If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

Highlighted
Regular Contributor II

Re: Single SSID OnBoarding authentication

I can probably google "what is aruba ASO"

but can you elaborate?!

Highlighted
Moderator

Re: Single SSID OnBoarding authentication

http://community.arubanetworks.com/t5/Security/Video-demo-of-new-ClearPass-Auto-Sign-On/td-p/150106


If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

Highlighted
Regular Contributor II

Re: Single SSID OnBoarding authentication

Thanks Tim, I was asking about something native without the need to idp. Cisco ISE does it by default when you onboard clients and I was curious to see if ClearPass has it as well out of the box.

Highlighted
Moderator

Re: Single SSID OnBoarding authentication

This is completely native in ClearPass and the controller. No external IdP is required.


If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

Highlighted
Regular Contributor II

Re: Single SSID OnBoarding authentication

I should go watch that video.

 

Thanks again.

Highlighted
Moderator

Re: Single SSID OnBoarding authentication

The video covers ASO with third party apps. It can also be used internally with ClearPass SAML functions like Onboard. It's covered in the SAML TechNote.


If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

Highlighted
Regular Contributor II

Re: Single SSID OnBoarding authentication

Woow too many steps to get this simple task. I guess it is better than not having it at all. 

I figured ClearPass is always a step ahead of ISE and though it might be a check box.

Highlighted
Moderator

Re: Single SSID OnBoarding authentication

Do dual SSID onboarding ;)


If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: