Security

 View Only
Back to discussions
Expand all | Collapse all

MAC-Auth (CPPM) + Guest Portal + Blacklist

This thread has been viewed 4 times

  • 1.  MAC-Auth (CPPM) + Guest Portal + Blacklist

    Posted Mar 27, 2020 05:25 AM

    Hi Community,

     

    yesterday we experienced during a Migration from AOS6 to AOS8 following issue:

     

    User was mac-authenticated with Guest-SSID. We blacklisted him with "stm add-blacklist-client <macaddr>". He was successfully disconnected.

     

    With "stm remove-blacklist-client" we removed him again from the blacklist. But instead of being mac-authenticated again he had to login to the captive-portal again.

     

    His account in cppm was not changed.

     

    Is that the right behaviour?

    Does ist also occur when using "aaa user delete"?

     

    Best regards,
    Maurice



  • 2.  RE: MAC-Auth (CPPM) + Guest Portal + Blacklist

    Posted Mar 27, 2020 10:41 AM

    Was there a user-table entry for the machine? If so you should also do a "aaa user delete mac <mac address>". Also check to see if you have the Clearpass Servers set as RFC 3576 Servers in your AOS8 environment and its not sourcing from the Mobility Masters is you have them in your environment.

     

    I assume the devies are not getting the correct role returned?



Related Content