Wireless Access

I have a ticket open/pending with TAC, but they are super busy these days.

I have 3 SSID's setup, and manage my AP's in Aruba Central.
1. one for internal laptops that use Radius and an internal PKI to authenticate, so no password and only internal devices can connect. Nearly full internal access
2. A true Guest/Visitor Wi-Fi, this uses a cloud captive portal with self registration, and has MAC caching enabled.

3. I have Wi-Fi for Employee Devices that need a bit more access than guests, but not full blown laptop levels.
This one uses an internal captive portal, that goes to an internal Radius server and requires the internal Active Directory username and password
It works, but there is no option that I can find to do MAC caching. It makes them sign in usually once per day, but sometimes 2 -3 times
I set the inactivity timeout to the max of 86400 seconds, or 24 hours, and I set the "ReAuth Interval" to 0 so it should be off.

I would like the employee device option to not have to re-authenticate until their active directory password expires /changes.
Anyone know if this is possible?

------------------------------
Matt
------------------------------

I should add, I understand that maybe clearPass could solve this? But I can't seem to find a how?
I beleive what I need is the internal captive portal to trigger the internal RADIUS/NPS for intial Auth. Then I need ClearPass to do MAC Caching to bypass the need for the captive portal for a set period of time (Set days, or weeks, or months etc)

Has anyone tried that?

------------------------------
Matt
------------------------------

You can use ClearPass to perform the MAC caching. It depends on the authentication on the SSID how to do that, and it will probably require changing the default services a bit to match your scenario. The New Service wizard for Guest with MAC caching should get you probably 90% done.

If you are not familiar with how to set it up, I would recommend working with a partner that has these skills. Or you may work with Aruba Support as well if you have direct access.

------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your Aruba partner, distributor, or Aruba TAC Support. Check https://www.arubanetworks.com/support-services/contact-support/ for how to contact Aruba TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or Aruba Networks.

In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------

Original Message:
Sent: May 20, 2021 07:26 PM
From: Matt Ervin
Subject: Internal Captive Portal - MAC Caching?

I should add, I understand that maybe clearPass could solve this? But I can't seem to find a how?
I beleive what I need is the internal captive portal to trigger the internal RADIUS/NPS for intial Auth. Then I need ClearPass to do MAC Caching to bypass the need for the captive portal for a set period of time (Set days, or weeks, or months etc)

Has anyone tried that?

------------------------------
Matt
------------------------------