Security

Hi,

I want to use ClearPass like a simply Radius for Employee.
The employees use their Active Directory credentials for authenticate against Wirless, without captive portal.

 

is this possible? or they have to pass trough captive portal?
if this is possible can you help me to understand how?

 

thanks in advance
Best regards

You'd want to set up an 802.1X SSID using EAP-PEAP.

 

Once your Active Directory servers are configured in ClearPass as an authentication source, you can use the "Aruba 802.1X Wireless" service template inside of ClearPass.

 

 

On the controller side, you'll need to put your ClearPass servers into a server group, then assign the server group the 802.1X server-group in the AAA profile for your 1X SSID.

Just add to Cappalli's suggestion , make sure you add clearpass to the domain (administration > server configuration ) and add your active directory as an authentication source (configuration > authentication source)

In order for you to accomplish you will need an AD account that can read AD attributes .

HI,

 

Thanks

i have solved my issue and now the configuration is clear in my mind.

 

Best regards

Did you get this working and, if so, can you tell me what you did?

Hi,

you have to put the into your domain.

After this you have set on clearpass the AD like authentication source, and on the controller you have to put the clearpass in the server group that define the autentication sources.

 

What is your issue?

in the access log you can find some error like "invalid authenitcaiton"?

 

Best regards

Andrea

I have followed all the steps, but it shows me this error, you could help me, thanks.

Click on the Alert Tab