Security

Reply
Highlighted
Contributor I

how to get FQDN of device via clearpass mac authentication

hi,

am trying to integrate cppm via cisco switch,

tryin to get  FQDN of device while doing mac auth mab,

issue is am only getting mac address of device as a username

any advise


Accepted Solutions
Highlighted
Moderator

Re: how to get FQDN of device via clearpass mac authentication

You need to use 802.1X Machine Authentication for this. You won't be able to
consistently grab the host name during a MAC-authentication.


If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

View solution in original post


All Replies
Highlighted
Moderator

Re: how to get FQDN of device via clearpass mac authentication

That is not possible as FQDN is not used during a MAC-authentication.

 

You could potentially try using the Audit Endpoint option, but you will likely get mixed results.



If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

Highlighted
Contributor I

Re: how to get FQDN of device via clearpass mac authentication

we have more than 10 domain and the customer doesnt want to integrate it with cppm for aech,

 

i just want to retrieve FQDN

ec: pc1.domain1.com

and use domain1 attribute to redirect that domain user to another vlan,

 

i just want cppm to get that attrubutes on the access tracker,

it worked but when i shut the cisco port and enabled again ,i got authentication failed on cisco sswitch

Highlighted
Moderator

Re: how to get FQDN of device via clearpass mac authentication

You need to use 802.1X Machine Authentication for this. You won't be able to
consistently grab the host name during a MAC-authentication.


If this response is more than 1 year old, it may no longer be accurate. Please consult official Aruba documentation, TAC or your Aruba SE.

| Aruba Alumni | @timcappalli | timcappalli.me |

View solution in original post