Wireless Access

last person joined: 9 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Clearpass MSCHAPv2 device type

This thread has been viewed 2 times

  • 1.  Clearpass MSCHAPv2 device type

    Posted Oct 23, 2017 11:27 AM

    Hi, is it possible to allow just windows machines to connect using MSCHAPv2 ? I am trying to move away from mschapv2 but in the meantime it would be good to only allow certain OS so connect. Is it possible if i have profiler enabled?



  • 2.  RE: Clearpass MSCHAPv2 device type
    Best Answer

    EMPLOYEE
    Posted Nov 04, 2017 02:28 PM

    802.1x would require authentication before the client gets an ip address.  The client would need an ip address to determine the client type.  that means that the device would first need to get on your network to be provide and kicked off, after.

     

    What you might want to do is configure your Windows devices for machine-only authentication on the wireless supplicant and then only allow devices in the domain computers group to authenticate in ClearPass.



  • 3.  RE: Clearpass MSCHAPv2 device type

    Posted Nov 06, 2017 09:14 AM

    Thanks, I appreciate your help