Security

 View Only
last person joined: yesterday 

Forum to discuss Enterprise security using HPE Aruba Networking NAC solutions (ClearPass), Introspect, VIA, 360 Security Exchange, Extensions, and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

MPSK Passphrase

This thread has been viewed 31 times
  • 1.  MPSK Passphrase

    Posted Jul 27, 2022 03:34 AM

    Hello,

    I am testing MPSK on Clearpass & AOS and we want to implement specific MPSK per group of devices for IOT instead of per device MPSK.

    This scenario work OK with some changes on the MPSK Template generated service & policies.

    I have a problem if I want to set the Attribute "Aruba-MPSK-Passphrase", the only choice available is auto generated PSK as display below.

    The field is not editable !!


    Is there any way to set the Passphrase to a specific value instead of an auto generated value ?

    Kind regards
    Christian



  • 2.  RE: MPSK Passphrase

    Posted Jul 27, 2022 03:35 AM
    I am running CPPM 6.10.6

    Regards


  • 3.  RE: MPSK Passphrase

    EMPLOYEE
    Posted Jul 27, 2022 08:25 AM
    What may work is to export the config (with password!) then change the value in XML and import again. That should work.

    ------------------------------
    Herman Robers
    ------------------------
    If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

    In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
    ------------------------------



  • 4.  RE: MPSK Passphrase

    Posted Jul 27, 2022 11:10 AM
    Hello Herman,

    As usual your solutions / workarounds are working like a charm.

    Tested and working :-)  Insert & update from XML permit to set the group PSK to a specific value

    Thanks and kind regards

    Christian