Wireless Access

last person joined: 15 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

DHCP fingerprinting with IAP and PSK authentication

This thread has been viewed 1 times

  • 1.  DHCP fingerprinting with IAP and PSK authentication

    Posted Apr 03, 2018 03:36 PM

    Hello,

     

    I was just curisous if it is possible to leverage DHCP fingerprinting when authenticating devices via PSK. We have several devices that do not support or easily support 802.1X authentication, but that need to be seperated into different roles and VLANs. I've been told that you have to use CPPM to do the fingerprinting when using IAP, but that leads me to believe that 802.1X is the only supported authentication method then.

     

    I'm thinking the answer is no since PSK does not require the AP to verify anything other than a locally stored PSK, so it would not reach out to CPPM at all.

     



  • 2.  RE: DHCP fingerprinting with IAP and PSK authentication

    EMPLOYEE
    Posted Apr 03, 2018 05:42 PM

    You could leverage mac authentication along with the PSK to steer devices to roles and/or VLANs based on what ClearPass knows about the device.