Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

option to send the SSID for the 802.1x authentication request.

This thread has been viewed 14 times
  • 1.  option to send the SSID for the 802.1x authentication request.

    Posted Oct 19, 2019 05:35 PM

    Folks,

    I recollect there was an option on the Wireless controller to send the SSID in the 802.1x authentication request to the server.

     

    As of now, I am unable to find out where that option is. It was a simple checkbox.

     

    We have our certificate based authentication going to a Cisco ACS and just to get some documentation on place I am trying to find where that checkbox was.

     

    Please let me know.

     

     

    Thanks!!

    N.



  • 2.  RE: option to send the SSID for the 802.1x authentication request.
    Best Answer

    EMPLOYEE
    Posted Oct 19, 2019 06:31 PM

    It is in the radius server configuration.

    Not sure on the GUI but via CLI is as below.

     

    aaa authentication-server radius <rad_server_name>
    called-station-id type
      {ap-group | ap-macaddr | ap-name | ipaddr | macaddr | vlan-id}
      [delimiter {colon | dash | none}] [include-ssid {enable |disable}]


  • 3.  RE: option to send the SSID for the 802.1x authentication request.
    Best Answer

    EMPLOYEE
    Posted Oct 19, 2019 08:35 PM

    Specifically, Aruba Controller Radius requests always send the SSID in Aruba Attribute, Aruba-Essid-Name

    Screenshot 2019-10-19 at 19.28.07.png

     

     

    When you enable the "Include SSID" parameter in the Called Station ID section of the radius server, it sends the SSID appended to the BSSID of the AP in the Called-Station-ID radius attribute:

     

    Screenshot 2019-10-19 at 19.26.18.png

    Screenshot 2019-10-19 at 19.28.26.png