08-21-2014 12:44 PM
I need some help tracking down a user based on IP. Yesterday morning someone using 192.168.10.193 had some suspicous activity on our guest network. We have a 650 controller doing DHCP for the network but the lease is only 4 hours. We also have AirWave and ClearPass doing guest authentication. We authenticate against a local user database on ClearPAss so it has to be someone we gratned access to. Any tips in tracking them down?
Solved! Go to Solution.
08-21-2014 12:58 PM
Do you return the username to the controller on your guest network? If so, you should be able to search AirWave by IP address and it will give you all the users that had that IP.
| Tim Cappalli | Aruba Security | @timcappalli | timcappalli.me |