Wireless Access

Contributor II

Tracking down user

I need some help tracking down a user based on IP. Yesterday morning someone using had some suspicous activity on our guest network. We have a 650 controller doing DHCP for the network but the lease is only 4 hours. We also have AirWave and ClearPass doing guest authentication. We authenticate against a local user database on ClearPAss so it has to be someone we gratned access to. Any tips in tracking them down?

Guru Elite

Re: Tracking down user

Do you return the username to the controller on your guest network? If so, you should be able to search AirWave by IP address and it will give you all the users that had that IP.

| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |

NOTE: Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba or Hewlett Packard Enterprise.
Contributor II

Re: Tracking down user

Perfect thanks!


Tracked him down there will be a public stoning with old BlackBerries tomorrow!

Search Airheads
Showing results for 
Search instead for 
Did you mean: