Wireless Access

Occasional Contributor I

two factor authentication

I am having my first IT audit since installing the Aruba system.  We have a small location with a 650 controller and APs.  they had few concerns with the guest network, however the employee network that we use for ipad connections they had issues.  We use a Radius server for Active Directory authentication, however they want to add another layer.  is there a way to have a white list of MAC address for clients that can access the system, and still require the user to log in?  

Guru Elite

Re: two factor authentication

You could add a mac authentication profile and a mac authentication server group (usually internal) to the AAA profile and then make the default mac authentication role the "logon" role.


This will forward them to a webpage where they would be forced to authenticate.


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Search Airheads
Showing results for 
Search instead for 
Did you mean: